ee 
Tadpole Pulsar User Documentation 


Complete, up to date user documentation can be downloaded at the 
following location: 


ftp://ftp.tadpole.com/support/Tadpole_Pulsar/Manuals/ 


——————————————————————————————————————E 
Contact Information for Technical Support 


North America Customer Service 
7.00 AM to 6.00 PM PST 


Tel: 1-800-734-7030 
E-mail: support@tadpole.com 


Europe, the Middle East and Africa (EMEA) Customer Service 
9.00 AM to 5.30 PM GMT 
Tel: +44 (0)870 432 4161 


Fax: +44 (0)870 432 4162 
E-mail: support@tadpole.com 


Online 


http://www.tadpole.com 
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Copyright and Trademark Information 

Tadpole® Pulsar User Guide 

Copyright 2009 General Dynamics Itronix Corporation 
All rights reserved. 

Part Number: 00-2810124 Rev. A 

Printed in the United States of America 


Tadpole® is a registered trademark of General Dynamics Itronix. 
Linux is a registered trademark of Linus Torvalds. 


All other product names mentioned herein are trademarks or registered 
trademarks of their respective owners. 


All rights reserved. No part of this publication may be re-produced, stored 
in a retrieval system, or transmitted in any form or by any means 
electronic, mechanical, photo copying, recording, or otherwise without 
the prior written permission of General Dynamics Itronix. No patent 
liability is assumed with respect to the use of the information contained 
herein. 


Some components of the Tadpole Pulsar Ultra-Thin Client contain code 
licensed under the Linux Real Mode Interface (LRMI dated 1998), the GNU 
General Public License (GPL_Version 2 dated June1991) and is based in 
part on the work of the Independent JPEG Group and TIFF library, written 
by Sam Leffer. License details are appended to the end of this document. 
For any further assistance please contact your distributor or contact 
support@tadpole.com. 


Disclaimer of Warranty Notice 
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General Dynamics Itronix Corporation makes no representations or 
warranties with respect to this manual, and shall not be liable for 
technical or editorial omissions made herein; nor incidental or 
consequential damages resulting from the furnishing, performance, or 
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use of this manual. Further, General Dynamics Itronix Corporation 
reserves the right to make changes in the specifications of the product 
described within this manual at any time without notice and without 
obligation of General Dynamics Itronix Corporation to notify any person 
of such revision or changes. 


Environmental Statement 


General Dynamics Itronix Corporation supports the concept of an 
environmentally responsible corporation. To this end we attempt to 
produce environmentally friendly products, minimize waste, and make 
use of recycled or used parts in our products to make the most use of 
used materials and components that pass our rigorous test and 
qualification procedures. All products containing such parts and 
components are supported fully by our manufacturers new product 
warranty. 


Declaration of FCC, UL & CE Conformity 


We, General Dynamics Itronix Corporation, 

2941 Fairview Park Drive, Suite 100, Falls Church, VA 22042-4513, USA, 
(509) 742-1598, declare under sole responsibility that the 

product Tadpole Pulsar Ultra-Thin Client complies with 

applicable FCC, UL, and CE directives. 


FCC Compliance Statement 


This equipment has been tested and found to comply with the limits for a 
Class B digital device, pursuant to part 15 of the FCC Rules. These limits 
are designed to provide reasonable protection against harmful 
interference in a residential installation. This equipment generates, uses 
and can radiate radio frequency energy and, if not installed and used in 
accordance with the instructions, may cause harmful interference to radio 
communications. However, there is no guarantee that interference will 
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not occur in a particular installation. If this equipment does cause harmful 
interference to radio or television reception, which can be determined by 
turning the equipment off and on, the user is encouraged to try to correct 
the interference by one or more of the following measures: 


-  Reorient or relocate the receiving antenna. 


- Increase the separation between the equipment and receiver. 


* Connect the equipment into an outlet on a circuit different from 
that to which the receiver is connected. 


* Consult the dealer or an experienced radio/ TV technician for 
help. 


DOC Class B Notice 


This digital apparatus does not exceed Class B limits for radio noise 
emission for a digital apparatus as set out in the Radio Interference 
Regulations of the Canadian Department of Communications. 


Shielded Cables 


Page iv 


Connections between this system and peripherals must be made using 
shielded cables in order to maintain compliance with FCC radio frequency 
emission limits. 


The connection of unshielded equipment interface cable to this 
equipment will invalidate the FCC Certification of this device and may 
cause interference levels that exceed the limits established by the FCC for 
this equipment. It is the responsibility of the user to obtain and use a 
shielded equipment interface cable with this device. If this equipment has 
more than one interface connector, do not leave cables connected to 
unused interfaces. 


Changes or modifications not expressly approved by the manufacturer 
could void the user's authority to operate the equipment. 
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Pl 
Modifications 
Modifications to this device not approved by General Dynamics Itronix 


Corporation may void the authority granted to the user by the FCC to 
operate this equipment. 


Safety Precautions 


y WARNING: Do not attempt to recharge alkaline or other non- 
\ rechargeable batteries with the Tadpole Pulsar adapter/charger. 
Pr Alkaline batteries cannot be recharged. Attempting to recharge 
alkaline batteries may cause personal injury and/or damage to the 


WARNING Tadpole Pulsar. 


JA WARNING: There is a risk of explosion if battery is replaced by an 
LN incorrect type. Dispose of used batteries according to the 
instructions. 
WARNING 


WARNING: To prevent fire, shock hazard, or damage to the 
JN equipment, do not expose the Tadpole Pulsar to rain or moisture. 
ZX 


Do not immerse the Tadpole Pulsar in water. If water has entered 
the Tadpole Pulsar, do not use the Tadpole Pulsar until it has been 
WARNING inspected by General Dynamics Itronix Corporation. 


WARNING: All service and upgrades to the Tadpole Pulsar must 


fs \ be performed by an authorized technician only. Otherwise, you 
f \ may encounter personal injury and/or damage your computer. 
WARNING 
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Important Safety Instructions 
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The following instructions pertain to the risk of fire, electric shock, or bodily 
injury. Please read all of these instructions carefully. 


1. 


Follow all of the instructions and warnings marked on the product or 
included in this manual. 


Do not place this product on an unstable or unsupported surface. 


The computer may fall, causing serious damage to the computer and 
others around. 


Slots and openings in the product are for ventilation. To ensure 
reliable operation of the Tadpole Pulsar, and to protect it from 
overheating, these openings must not be blocked or covered. Do not 
use this computer on a bed, sofa, rug or other similar surface. This 
product should never be placed near an oven, a radiator, or heat 
register. This product should not be placed in a built-in installation 
unless proper ventilation is provided. 


Never push objects of any kind into the Tadpole Pulsar cabinet 
openings as they may touch dangerous voltage points or short out 
parts that could result in a fire or electrical shock. Keep liquids of any 
kind away from the computer. 


This product should only be connected to the AC power source 
indicated on your product system's information label. If you are not 
sure of the type of AC power available, consult your dealer or local 
power company. Only connect the Tadpole Pulsar to a power outlet 
matching the power requirements of this product. 


Do not allow anything to rest on the power cord. Do not position this 
product where people will walk on the cord. If you have to use an 
extension cord with this product, make sure that the total amperage 
rating of all equipment plugged into it does not exceed the 
amperage rating of the extension cord. Make sure that the total of all 
equipment plugged into the main AC power outlet does not exceed 
15 amps. 


This product is equipped with a 3-wire grounded type plug. 
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9. Unplug your Tadpole Pulsar from the main electrical power outlet 
before cleaning. Do not use liquid cleaners or aerosol cleaners. Use a 
damp cloth for cleaning. 


10. Keep liquids of any kind away from the product. 
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Welcome to the Tadpole Pulsar Ultra-Thin Client User Guide. 


e 


The Tadpole Pulsar is a high-resolution, wireless-enabled ultra-thin client 
equivalent to that of the Sun Ray thin client manufactured by Sun 
Microsystems. 


The Tadpole Pulsar also supports a virtual private network (VPN) which 
supports features to allow communication across the network that is 
secured through authentication and encryption. A list of these features is 
available in the section titled "Configuring VPN on the Tadpole Pulsar" on 
page 71. 
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The Sun Ray Computing Model Components 
The Tadpole Pulsar Ultra-Thin Client 


The Tadpole Pulsar Ultra-Thin Client is a stateless device through which 
users can access data and applications that reside on a secure server. No 
data is stored on the Tadpole Pulsar. 


The Sun Ray Server 


With the release of the Sun Ray Server Software 3.0, Sun Ray Servers can 
be Solaris or Linux based. The Sun Ray Server manages user 
authentication and user sessions that are accessed via thin clients. User 
sessions, data, and applications reside on the server. Multiple servers can 
be configured for fail over, back ups, and load balancing. Sun Ray Server 
Software 4.0 and above is recommended for the Tadpole Pulsar. However, 
all models are supported on version 3.1 of the Sun Ray Server Software. 


An Interconnection Fabric 


The interconnection fabric is comprised of the network components that 
connect the thin clients to the server. The Tadpole Pulsar has a 10/100 
Ethernet port as well as a built in wireless card for wireless connections. In 
addition, the Tadpole Pulsar supports a number of mobile broadband 
devices via the USB ports (optional configuration, dependent on locality). 
Mobile broadband devices are not bundled in the standard configuration. 
For a list of the supported devices, see 


ftp://ftp.tadpole.com/support/Tadpole_Pulsar/Manuals/3G_devices.pdf 
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User Instructions 


This section provides basic user instructions for operating the Tadpole 
Pulsar Ultra-Thin Client. 
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Tadpole Pulsar Components 


As you unpack your Tadpole Pulsar, check the shipping carton and the 


components inside it for damage. 
Figure 1. 

Tadpole Pulsar 

and 

AC Power Cord 


Components VESA Mounting Bracket 


Tadpole Pulsar Unit 
<<. 


Mounting Stand Antenna AC Adapter 


If the Tadpole Pulsar components are missing or damaged, please contact 
your shipper or dealer immediately. 


Each shipping carton contains the following items: 


* Tadpole Pulsar Ultra-Thin Client 
« AC adapter and power cord 

- Antenna 

+ _VESA mounting bracket 

* Upright mounting stand 

+ This User Guide 
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Tadpole Pulsar Features 


This section identifies the hardware components of the Tadpole Pulsar. 


Figure 2. 
Tadpole Pulsar 
Back 


1 


Table 1. Back Panel Components 


Wireless antenna connection 
Powered USB port (x2) 
Ethernet port (x1) 


DVI-I connector (x1) 


DVI-D connector (x1) 


AC connector 


NO] um] BR] wn 


Kensington lock 
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Figure 3. 
Tadpole Pulsar 
Front 


Table 2. Front Panel Components 


1 Microphone/Audio-in (x1) 
Headphones/Audio-out (x1) 
Powered USB port (x2) 
Power button 


Power LED 


NO} ny} BR] wn 


Smart Card slot 
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SC 
Attaching the Antenna 


If you will be using a wireless network connection, connect the antenna 
to the rear of the Tadpole Pulsar unit. See Figure 4. 


Figure 4. 
Attaching the 
Antenna 


e\ NOTE: The antenna has an axis point that allows it to be rotated to a 90° angle. 
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Attaching the VESA Mounting Bracket 


To mount the Tadpole Pulsar unit to an LCD monitor, first check that the 
monitor supports VESA mounting. If it does, then attach the supplied 
VESA mounting bracket to the VESA mount holes on the monitor. Align 
the Tadpole Pulsar unit with the locking pins on the VESA mounting 
bracket and secure the unit with the thumbscrew. See Figure 5. 


Figure 5. 
Attaching the 
VESA Mounting 
Bracket 
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Attaching the Upright Mounting Stand 


For vertical desktop mounting, use the thumbscrew on the underside of 
the upright mounting stand to secure the Tadpole Pulsar to the upright 
mounting stand. See Figure 6. 


Figure 6. 
Attaching the 
Upright 
Mounting 
Stand 


e\ NOTE: The upright mounting stand and the Tadpole Pulsar unit are keyed so that 
the Tadpole Pulsar unit fits both into the thumbscrew and also into a 
locking pin to prevent the unit from rotating on the upright mounting 
stand. 
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Using the AC Adapter 
The Tadpole Pulsar uses an AC adapter for powering the system. 
Plugging in the AC Adapter 


Place the Tadpole Pulsar near an AC outlet. 

Plug the AC adapter into the AC connector of the Tadpole Pulsar. 
Plug the AC cable plug into the AC adaptor. 

Plug the AC cable plug into a nearby AC outlet. 


PS WN > 


Unplugging the AC Adapter 
1. Check the Tadpole Pulsar Power-On LED to confirm that the LED is 
off and that the Tadpole Pulsar is powered off. 
Unplug the AC cable from the AC outlet. 


Disconnect the AC adapter from the Tadpole Pulsar. 


Powering Up 
This section discusses the steps for powering up the system. 


1. Verify that AC power is available to the system. 


2. Plug in your external display(s) to the DVI connector(s) on the back 
panel. If your external display has a male VGA connector, you will 
need a VGA-to-DVI adapter (not included). 


3. Connect a USB keyboard and mouse to the powered USB ports. 
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4. 


Figure 7. 
Tadpole Pulsar 
Power Button 


5. 


Figure 8. 
Tadpole Pulsar 
Initial Menu 


Press the power button on the front of the Tadpole Pulsar to turn on 
the system. See Figure 7. 


View the initial system screens. After approximately 6 seconds the 
monitor momentarily displays a light blue screen with a Loading... 
message, indicating that the Tadpole Pulsar is running initial startup 
processes. After 12 seconds a menu displays on screen, indicating 
that the Tadpole Pulsar is trying to connect to a Sun Ray server via 
DHCP. See Figure 8. 


GENERAL DYNAMICS 


rs? Show options 


e\ NOTE: By default the Tadpole Pulsar connects via a wired Ethernet connection toa 


6. 


Sun Ray server running DHCP. 


The Tadpole Pulsar is now ready to be configured for connection to 
your network. (Also see "Network Access Setup" on page 51.) 
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Accessing a Network Profile 


Upon completion of the Tadpole Pulsar initialization and the display of 
the initial menu, perform the following steps to access a network profile: 


1. Click Show options on the initial menu to display the following 
options tabs: Network Profiles, Video Settings, Hardware 
Settings, and Status. See Figure 9. 


Figure 9. 
Tadpole Pulsar 
Options Tabs 


| GENERAL DYNAMICS 


Hide options 


Network Profiles | Video Settings | Hardware Settings | Status| 


[>\ | cont. Room WiFi 


|_| bHcP 
Some 


__) Office LAN 
— 

|__} Remote VPN 
tome 


2. Click the Network Profiles tab to display the available network 
profiles. 
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3. Double-click a profile in the Network Profiles tab to connect to the 


network. These network profiles have been pre-configured by your 
network administrator. 


e\ NOTE: If the Tadpole Pulsar detects an Ethernet cable, it defaults to use the wired 


Ethernet connection. Remove the cable to connect via wireless or a mobile 
broadband device. 


Video Settings 


Click the Video Settings tab in the options menu to access the video 
settings. See Figure 10. 


Figure 10: GENERAL DYNAMICS 
Tadpole Pulsar 
Video Settings 


Hide options 


Network Profiles | ¥ideo Settings [Hardware Settings [Status 


Video 
Screen Resolution 
Video Output 
Screen Rotation [ DVH + | [None | 
Swap Screens @ ‘Yes @ No 
Desktop Size 
Video Blanking Timeout? @ Leave on 


© Turn off after CJ minutes 


~ 


Close | [ Apply 
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Screen Resolution 


When a display device is connected to the Tadpole Pulsar, the default 
behavior is to use the resolution of the largest connected display. Use the 
Screen Resolution menu if you want to change the resolution. See 
Figure 11. If there are two display monitors connected, select the port 
(DVI-I or DVI-D) of the desired monitor and change the resolution if 
desired. The procedure for specifying the Screen Resolution follows: 


1. Select the port from the Screen Resolution menu to which the 
external display device is connected. See Figure 11. 


Figure 11. ( GENERAL DYNAMICS 
Screen 


Resolution DHCP 
Menu ——— 


Hide options 


Video 
Screen Resolution 
Video Output 
Screen Rotation 
Swap Screens 
Desktop Size 


Video Blanking Timeout? @ Leave on 


© Turn off after - minutes 


[ Close Apply 


+ DVI-Lis the dual link port for either analog or digital monitors, 
and for high resolution monitors. 


+ DVI-Dis the port only for digital monitors. 
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NOTE: For most purposes, you can use either port, but for special circumstances, 
e) such as analog or high resolution monitors, you need to use the DVI-I port. 


2. The Tadpole Pulsar automatically uses the largest resolution for the 
display monitor. To temporarily change the resolution at which the 
Tadpole Pulsar drives the display enter values into the text field to 
the right of the Screen Resolution menu. Resolution and frequency 
values are in the format Width (px) x Height (px) @ Refresh Rate (Hz), 
e.g. 1920x1200@60. See “Display Devices and Session Size” below 
for more information on setting the resolution and changing the 
default session size. 


e\ NOTE: Spaces between values are not allowed. 


3. Click Apply to apply the screen resolution changes. The resolution 
will change and you will be asked to confirm the change in a pop-up 
window. If you do not confirm, the setting will revert back to the 
original after 15 seconds. If you confirm, the setting remains in 
operation until you power cycle the machine. 


Display Devices and Session Size 


When a display device is connected to the Tadpole Pulsar, the default 
behavior is to set the default session size to match the resolution of the 
largest connected display. This should be adequate for most uses. For 
example, connecting an external 1920x1200 LCD screen results in a 
default session size of 1920x1200. Attaching a projector with a resolution 
of 1024x768 to this setup results in a default session size of 1920x1200 
(the resolution of the connected display). See "Example: Connecting an 
LCD Projector for Use with the Tadpole Pulsar" on page 22 for more 
information on connecting projectors. 


If this behavior is not desired, it is generally best to set the default policy 
on the SunRay server. This can be client specific (via MAC address) or 
token specific (via smart card). Please refer to the SunRay user guide and 
utresadm and utresdef commands in particular. 
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As an alternative, the Tadpole Pulsar Video Settings menus can be used 
to set the default policy for the unit. However, this only affects new 
sessions, and the policy set on the SunRay server takes precedence. If a 
session is active, it needs to be terminated and a new session initiated in 
order for any changes in these menus to become active. 


Video Output 


Select the appropriate video output from the Video Output menu in the 
Video Settings tab. Figure 12 shows the video output modes available 
for the Tadpole Pulsar. Click Apply to apply the video output changes. 


Figure 12. Video |= 
GENERAL DYNAMICS 
Output Menu | 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings |Status| 


Video 


Video Output 
Screen Rotation 

DVI-D 
swap Screens Mirror Smallest 
Mirror Largest 
DualHead Mode 


© Turn off after ve minutes 


Desktop Size 


Video Blanking Timeout? 


[Close ] [ Apply | 
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e\ NOTE: 


e NOTE: 


The Tadpole Pulsar operates in a fail-safe mode. Should video output be 
directed where no display device is connected, the system attempts to fall 
back to a working display device. When a display device is plugged into a 
Tadpole Pulsar, the system attempts to dynamically direct video output to 
the connected display device. 


DVI-I is the dual link port for either analog or digital monitors, 
LCD projectors, and for high resolution monitors with resolutions 
above 1920x1200. 


DVI-D is the port only for digital monitors. 


For most purposes, you can use either port, but for special circumstances, 
such as analog or high resolution monitors, you need to use the DVI-I port. 


Mirror Smallest/Largest: The monitors are mirrored. When set 
on Mirror Largest, if the monitors are different sizes, the smaller 
matches the resolution of the larger. The SunRay server does not 
recognize two monitors operating in a mirrored mode, since 
commands to change resolutions (such as utset and 

utset tings) affect both monitors identically. 


DualHead Mode: When two monitors are connected, they are 
treated as one large screen. The SunRay Server is aware there are 
two monitors and controls them separately in a mode compatible 
with a SunRay2 with dual heads. SunRay server commands (such 
as /opt/SUNWut/bin/utset) can be used to control the 
resolution of each individual monitor. 


Dynamically attaching a monitor when configured for DualHead Mode 
mirrors the monitors until the Tadpole Pulsar is restarted. Press [Menu-A] 
(or [Stop-A] on a Sun keyboard) to restart, at which point the SunRay Server 
detects the monitor configuration and treats each monitor as a separate 
entity. This is a restriction of the SunRay Server software. 


Screen Rotation 


To adjust the screen rotation, select the appropriate port and the desired 
rotation from the Screen Rotation menus in the Video Settings tab. See 
Figure 13 and Figure 14. 


DVI-I is the dual link port for either analog or digital monitors, 
LCD projectors, and for high resolution monitors with resolutions 
above 1920x1200. 
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+ DVI-Dis the port only for digital monitors. 
- None: No screen rotation. 

- Right: Rotate Clockwise. 

- Left: Rotate counter-clockwise. 


* Over: Rotate over (upside down). 


Rotation Port 
Menu 


Screen Resolution DVI 


Video Output 
Screen Rotation 

Swap Screens 

Desktop Size 


Video Blanking Timeout? 
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Figure 14. Screen Jj 
Rotation 
Direction Menu 


GENERAL DYNANICS 


Hide options 


Network Profiles | Video Settings | Hardware Settings | Status| 


Video 
Screen Resolution DYVI-l ¥ default 
Video Output DVI 2 


Screen Rotation DVI v (.Nonex ] 
Swap Screens @ ‘Yes @ No 


Right 


. Over 
Video Blanking Timeout? @ Leave on 


© Turn off after 


Close | Apply 


Swap Screens 


If you are using DualHead Mode in Video Output Settings and you 
need to swap the screens, click the Yes radio button to the right of the 
Swap Screens setting in the Video Settings tab. See Figure 10. 


Desktop Size 


The Tadpole Pulsar has three sets of dimensions (width x height) relating 
to screens and video: 


- The Physical Size is the size in pixels of the highest resolution 
supported by the monitor, and used to set maximum buffer sizes. 
The SunRay server will take this to be the default resolution, also 
known as the “Monitor” resolution. When two display monitors 
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are connected, the physical size is set to the smallest monitor 
when configured to Mirror Smallest, and largest when 
configured to Mirror Largest. 


+ The Logical Size is the size in pixels of the X windows desktop 
size. A newly created X session has a logical size the same as the 
physical size. When moving a SunRay session between two 
different desktop units, the logical size can become greater or 
smaller than the physical size. When this happens, the SunRay 
server is responsible for adjusting the resolution of the logical size 
to the physical size. 


+ The Desktop Size forces the physical size to the dimensions 
chosen, and this will become the default (or “Monitor”) resolution 
for the Tadpole Pulsar. When the Desktop Size is larger than any 
monitors attached, the Tadpole Pulsar will pan around the screen 
as the mouse reaches any of the monitor's extremities. 


To set the desktop size, select the desired size from the Desktop Size 
dropdown list in the Video Settings tab. See Figure 15. Click Apply to apply 
the desktop size changes. 
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Figure 15. . GENERAL DYNAMICS 
Tadpole 


Desktop Size 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings | Status 


Video 
Screen Resolution 
Video Output 

Screen Rotation 
Swap Screens @ Yes @ No 


Video Blanking Timeout? 


640x480 
300x600 (_) minutes 
1024x768 
1280x800 


1280x1024 ( 


Close Apply 


Video Blanking 
Use the Video Blanking Timeout? setting to override the video blanking 
(video power saving) options from the host. This setting places the video 
output into power saving mode after the specified time-out regardless of 
the screen saver settings. 


To change the video blanking timeout: 
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3. 


To the right of the Video Blanking Timeout? option in the Video 
Settings tab, click the Turn off after radio button. See Figure 10. 


In the text field to the right of the Turn off after radio button option, 
enter the number of minutes (e.g. 90 for 90 minutes) for the power 
saving mode time-out. A value of 0 (zero) means that the video 
never enters power saving mode. 


Click Apply to apply the video blanking timeout changes. 


Example: Connecting an LCD Projector for Use with the Tadpole Pulsar 


1. 


e\ NOTE: 
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Connect the LCD projector to the DVI-I port of the Tadpole Pulsar 
and power-up the projector. 


Power on the Tadpole Pulsar. 


By default the Pulsar mirrors the resolution of the largest display 
device connected. If another higher resolution device is connected, 
go to Step 3 to modify this behavior. 


In the Video Settings tab, select Mirror Smallest from the Video 
Output menu and click Apply to apply the video output changes. 


Depending on the configuration of your SunRay server session, you 
may need to restart your session. At the login prompt, press and hold 
down [Ctrl-Alt] and then tap [Backspace] twice in quick succession. 
You may need to repeat the key sequence several times to kill the 
session and initiate a re-start. 


The key sequence kills the active session. Any data not saved is lost. 


The screen momentarily goes black before restarting your session 
and providing a login screen at the correct resolution. If the reso- 
lution is incorrect, go to Step 4. 


In the text field to the right of the Screen Resolution menu in the 
Video Settings tab, enter the desired resolution at which the LCD 
projector operates (e.g. 1024x768@60). Click Apply to apply the 
screen resolution changes. 


Depending on the configuration of your SunRay server session, you 


may need to restart your session. At the login prompt, press and hold 
down [Ctrl-Alt] and then tap [Backspace] twice in quick succession. 
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You may need to continue to hold down [Ctrl-Alt] and tap 
[Backspace] twice in quick succession several times to kill the 
session and initiate a re-start. 


e\ NOTE: The key sequence kills the active session. Any data not saved is lost. 


The screen momentarily goes black before restarting your session 
and providing a login screen at the correct resolution. 


Hardware Settings 


Click the Hardware Settings tab in the options menu to access the 
hardware settings. See Figure 16. 


+ Keyboard Type: Select from the list of available English-language 
keyboard types. See Figure 17. 


e\ NOTE: Sun keyboard types are automatically detected. 


«+ Mouse Acceleration: This controls the amount of mouse or 
touchpad movement required to move the cursor across the 
screen. See Figure 16. Clicking the checkbox enables the local 
mouse acceleration to override the SunRay server acceleration. The 
slide bar determines the acceleration/deceleration of the mouse as 
the finger moves across the touchpad. 


+ Disable Mouse While Typing?: Select Yes or No as desired. 
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Figure 16. 
Tadpole Pulsar 
Hardware 
Settings Tab 


GENERAL DYNAMICS 


Keyboard Type 


Mouse Acceleration 
Disable Mouse While Typing? 
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i 


@ Ye 


s © No 
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Figure 17. GENERAL DYNAMICS 
Keyboard Type 


Hide options 


Network Profiles |Video Settings| Hardware Settings | Status 


Hardware 
Keyboard Type 
Mouse Acceleration English US 
Ror ie ean a per ear nes English US (Sun) 
Disable Mouse While Typing? English UK 
English UK (Sun) 
Japanese 
Japanese (Sun) (=) 


Status 


The Status tab is shown in Figure 18. This tab is for display only. The 
information cannot be changed in this tab. 


Identification 


Displays information specific to the unit. 


Tadpole Pulsar User Guide Page 25 


Network 

Displays network connection information. 
Extended Status 

Displays the following four buttons: 


¢ Ethernet: This is the default. It shows the network connection 
information. The actual connection can be LAN, WiFi, or 3G 
broadband. 


+ Radio: This displays the WiFi/3G SSID and signal strength/quality. 
See Figure 19. 


- VPN: This displays the Virtual Private Network connection 
information. See Figure 20. 


+ Power: This displays the battery usage information. It is disabled 
for Pulsar, which has no battery. 
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Figure 18. 
Tadpole Pulsar 


| GENERAL DYNAMICS 


Status Tab Office LAN 


~ Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings | Status 


Identification 


Unit M4C Address 


Firrnware 


Network 

SunRay Client Address 
SunRay Server 
Firmware Server 

VPN Peer 


Device Address 


Extended Status 


0021CC3E57DB 
Tadpole-dt02-¥3.7,10-0101 


192.168.128.199 
192.168.128.1 
192,.166.128.1 
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Figure 19. f 
GENERAL OYNAMICS 
Tadpole Pulsar 


WiFi Status Conf. Room WiFi < 


~ Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings | Status 


Identificatinn 
Unit mac Wifi Status 


Firrowart 
SSID Meg 


Access Point OOOFBS384801 
Protocol IEEE 802.11abg 
Bit Rate 11 Mbps 
SunRay Signal Quality 22% 

Signal (dBm) -86 

Noise (dBm) Unknown 
Firmwars Frequency Unknown 

VPN Pee 


Network — 


SunRay 


Extended Status 
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Pigure20. ( GENERAL DYNAMICS 
Tadpole Pulsar 


VPN Status 
= Remote YPN 


~ Hide options 


Network F 


Identific Source 11.8.29.162(4500) 
Destination 219.152.119.87(4500) 
Mode tunnel 
Firraw Encryption aes-128 
4uthentication hmac-shal 
Lifetime (sec) 28681 


Unit M 


Networt 

SPI 0x650820c 

Source 219.152.119.87(4500) 

SunRE Destination  11.8.29.162(4500) 

Firmnw Mode tunnel 

VPN P Encryption aes-128 
Authentication hmac-shal 

Device Lifetime {sec) 26681 


SunRée 
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Shutting Down the Tadpole Pulsar 


Press the power button located on the front of the Tadpole Pulsar to shut 
down the system. 


ee 
Restarting the Tadpole Pulsar 


Restart a Tadpole Pulsar that has been halted and powered down with the 
following steps: 


1. Press [Menu -A] (or [Stop-A] on a Sun keyboard) to perform a soft- 
reset of the client firmware. The system power resets and then 
restarts. 


2. Power up the system. 


| 
Keyboard 


A keyboard is not included as part of the Tadpole Pulsar package. Any 
generic USB keyboard is sufficient to operate the Tadpole Pulsar. 


This section covers identifies several keys that are commonly used when 
working with the operating system. 


Special Keys 


- — [Esc]: Press the [Esc] key to cancel any changes you are making 
and to exit a software screen or OSD menu. 


- [Enter]: Press the [Enter] key to position the blinking cursor at 
the beginning of the next line on the display screen. 


+ — [Prt Sc/Sys Rq]: Press the [Prt Sc/Sys Rq] key to print whatever is 
on the screen at the time. Note that in some software programs, 
this key may be used in conjunction with other keys for other 
specific functions. Consult the software user manual for more 
information. 
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+ [Num Lock]: Press the [Num Lock] key to enable/disable the 
numeric keys on the right hand side of the keyboard. 


+ [Caps Lock]: Press the [Caps Lock] key to type letters in upper 
case. The number keys and function keys are not affected. 


+ [Shift]: Press the [Shift] key in conjunction with a letter key to 
type the letter in upper case. Note that in some software 
programs, this key may be used in conjunction with other keys for 
other specific functions. 


Modifier Keys 


The following modifier keys only function when used in conjunction with 
other keys. 


> [Ctrl]: The [Ctrl] key is used in conjunction with other keys in your 
software program to perform specific functions. Refer to the 
software user's manual for details on how the [Ctrl] key functions. 


+ [Menu] or [Stop]: The [Menu] key (or [Stop] key on a Sun 
keyboard) is located between the [Alt] key and the [Ctrl] key on 
the right side of the space bar. Use it as a shortcut to access 
specific menus. See page 36. 


+ — [Alt]: The [Alt] key is used by your software program to perform 
specific functions. Refer to the software user's guide for more 
details on how to use the [AIt] key. 


Cursor Control and Editing Keys 


The keys listed in this section are specifically used to move the cursor on 
the display. When used in combination with other keys, these cursor 
control keys provide some editing functions. Refer to the specific 
software manual for details on how to use these keys. 


- Left/Right Arrow Keys: Press either of these keys to move the 
cursor one character at a time in the direction shown on the 
arrow key. 


- Up/Down Arrow Keys: Press either of these keys to move the 
cursor one line at a time in the direction shown on the arrow key. 
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+ — [PgUp] or [PgDn]: When used with the [Fn] key, the [PgUp] and 
[PgDn] keys allows the cursor to move page by page, or window 
by window, depending on the software. 


+ [Home]: The [Home] keys moves the cursor to the beginning of a 
document or the beginning of a line, depending on the software. 


+ [End]: The [End] key moves the cursor to the end of a line or to 
the end of a document, depending on the software application. 


+ — [Insert]: The [Insert] key enables the user to insert characters 
within the text while interacting with the OS. In some 
applications, [Insert] is a toggle key, alternating between 
character insert and character overtype. 


+ [Delete]: The [Delete] key is used to edit text at either the 
operating system command prompt or the text within a 
document. Press the [Delete] key to remove any characters to the 
right of the cursor and then pull the remaining typed characters 
from the right. 


+ [BackSpace]: While within a document, the [BackSpace] key 
moves the cursor to the left and simultaneously erases characters 
in its path. 


Status Indicator LED 


The Tadpole Pulsar has an LED to indicate that power is on. This LED is 
located on the front of the Tadpole Pulsar, as shown in Figure 21. The 
General Dynamics logo on the front of the Tadpole Pulsar also illuminates 
when power is on. 


Figure 21. 
Tadpole Pulsar 
Status Indicator 
LED 
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Using Smart Cards 


The Tadpole Pulsar uses Smart Cards for user identification and 
authentication. 


Inserting a Smart Card 
Insert a Smart Card using the following steps: 


1. Locate the Smart card slot on the front of the Tadpole Pulsar as 
shown in Figure 22. 


2. Carefully slide the card chip side first into the slot. Orientation of the 
chip up or down does not matter. 


3. If you encounter too much resistance, do not force the card. Check 
the card orientation and try again. 


Figure 22. 
Inserting and 
Removing a 
Smart Card 
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Removing a Smart Card 


Refer to Figure 22 and the following instructions for removing a Smart 
Card: 


1. Grasp the exposed edge of the Smart Card. 


2. Pull out to remove. 
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System Administrator 


This section provides instruction for configuring and connecting the 
Tadpole Pulsar Ultra-Thin Client to the network using an Ethernet 
connection, wireless connection, or mobile broadband connection. 
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Accessing the Tadpole Pulsar Menu System 


E) 


Figure 23. Main 


Menu 
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Perform the following steps to access the Tadpole Pulsar menu system. 


NOTE: The cursor must be located inside the On Screen Display (OSD) window to 
enable any of the menu items to be selected. 
It is also possible to move the OSD window by dragging the window toa 
new position. 


1. Turnon the Tadpole Pulsar. 
Press [Menu-M] (or [Stop-M] on a Sun keyboard). 


The main menu comes up in the OSD as shown below. To navigate 
the main menu use the [up/down/left/right arrow] to highlight the 
appropriate menu. When highlighted, press [Enter] to select. 


Main Menu = 
——| 


In addition to the main menu items shown above, use the [Menu] key (or 
the [Stop] key on a Sun keyboard) to access the following menus: 


[Menu-A] Soft reset of the Tadpole Pulsar firmware. The system power 
cycles and restarts. 


[Menu-B] Mini browser 
[Menu-L] Displays license information 


[Menu-P] Lists configured profiles and enables selection for use 
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[Menu-M] Main Menu 


[Esc] Exits the previous menu 


Network Profiles 


A profile is necessary to access the network server. Each profile can be 
configured to attach to both a wired network and a wireless or mobile 
broadband network. As a default, the Tadpole Pulsar connects to the 
Ethernet configured profile; if the Ethernet cable is not present, it 
connects via the wireless or mobile broadband network. 


The Network Profiles menu is accessible through the Main Menu. See 
Figure 24 and Figure 25. 


Figure 24. 
Network Profiles 


Menu (1 of 2) Hetwork Profiles > 
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Figure 25. 
Network Profiles 
Menu (2 of 2) 


Hetwork Profiles > 


Creating a New Profile 
1. In the Network Profiles menu, select New Profile and press [Enter]. 


Figure 26. 
Network Profiles 
Menu 


Hetwork Profiles & 
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2. Enter anew Network Profile name. This can contain up to 32 


characters. 
Ld 


Figure 27. New 
Profile Screen DHCP 


Enter Profile Mame 


3. Press [Enter] to save the new profile. 


Editing a Profile 


1. To configure the new profile or modify an existing one, select Edit 
Profile from the Network Profiles menu, then select the profile 


name. 
l 


Back ta Hetwork Profiles 


Figure 28. Edit 
Profile Menu DHCP 


DHCF 
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2. Configure the network profile in accordance with your network 
setup. 


See sections regarding configuring the Tadpole Pulsar for connection 
over Ethernet (page 51), wireless (page 57), and mobile broadband (page 
66). 


Defining a Startup Profile 


1. To define the profile the unit uses each time it is started, select 
Startup Profiles from the Network Profiles menu and select the 
network profile required. 


It possible to configure this startup or “default” profile as follows: 


a. For the profile to always start up when the unit is reset or turned 
on, select No at the Profile Menu at Startup menu. See Figure 29. 


Go to Step 2. 
Figure 29. Profile 
Menu at Startup 
Menu (1 of 3) ProFile Menu at 


Startup 


b. To be prompted to confirm the selection of a default profile each 
time the Tadpole Pulsar is started, select Yes at the Profile Menu 
at Startup menu. See Figure 30. 
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Figure 30. Profile 
Menu at Startup 


Menu (2 of 3) ProFile Menu at 
Startup 


The “default” profile highlighted in the OSD is used upon 
restart. The user must press the [Enter] key to allow the profile 
to initialize. 


Go to Step 2. 


c. The With Timeout option allows the user to delay the profile star- 
tup for up to 30 seconds before the profile is automatically started. 
During this delay an alternate profile can be selected. See 
Figure 31. 


Figure 31. Profile 
Menu at Startup 


Menu (3 of 3) ProFile Menu at 
Startup 
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d. Enter the number of seconds (1-30) for the delay. 


Figure 32. Profile 


Menu Timeout DHCP 
(1 of 2) 1 


Profile menu timeout Cs): 


e. Press [Enter] to confirm the configuration. 


Figure 33. Profile 
MenuTimeout DHCP 


(2 of 2) la 
i 


ProFile menu will be 

displayed For 205 on 

re-start with ‘office 
Wireless as the deFoult. 
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Asummary of the options for the default profile configuration is listed in 
Table 3. 


Table 3. Summary of Options for Default Profile Configuration 


No Always uses the “default” profile. No timeout. 


Yes Infinite timeout. Requires user to agree to the highlighted 
“default” profile selection. Enter key must be pressed. 


WIth Timeout _ | Sets the “default” profile with a 0-30 second delay. 


e\ NOTE: Only one profile can be configured as the “default” profile. The last profile 
modified using the startup profile menu becomes the “default” profile. 


2. For changes to take effect, the Tadpole Pulsar must be re-initialized. 
Press [Menu-A] (or [Stop-A] on a Sun keyboard) to reset/reboot 
the firmware. 


Copying a Profile 


1. Select Copy a Profile from the Network Profiles menu. Select the 
profile you wish to copy and then enter a new name. 


Figure 34. Copy 
Profile Screen 


Copy “home wireless & 


VPH to of Fice™ To 


3G VPH to of Fice 


2. Press [Enter] to save the newly created profile. 
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Deleting a Profile 


Select Delete Profile from the Network Profiles menu. Select the profile 
you wish to delete and then press [Enter]. 


Figure 35. 
Delete Profile 
Screen 


Delete Profile 


e\ NOTE: The active profile, which is displayed at the top left corner of the OSD 
window, cannot be deleted. 


Securing a Profile 


Each profile can be locked against upload or download or both by 
assigning a security password to the profile. By default the profile is 
unlocked. 


The purpose of this feature is to secure any given profile from being 
uploaded onto another Sun Ray firmware server and an existing profile 
being downloaded onto another Tadpole Pulsar system. To upload or 
download the profile, the security password must be known. 


In some instances users require access to a profile to add their own 
configuration for a given profile, such as a home wireless configuration. 
The VPN configuration maybe pre-defined by the administrator to protect 
sensitive information (such as the pre-shared key being shared with the 
user—once the pre-shared key is entered it's no longer displayed in plain 
text) while still allowing the profile to be edited by the user. If the profile is 
locked for both upload and download, the amended profile can not be 
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uploaded to the firmware server nor can the default profile be 
downloaded to the Tadpole Pulsar when the system connects to the 
server, ensuring that the user's home wireless configuration remains in 
place. 


Profile Management 


It is possible upon the creation of a single or complete set of multiple 
“profiles” on a Tadpole Pulsar to upload the “master” profile configuration 
to a firmware server in order to propagate the configuration to all Tadpole 
Pulsars of the same model or a defined number of Tadpole Pulsars by 
using the MAC address of the unit or use of the Tadpole Pulsar parms file. 
(See "Tadpole Pulsar .parms File" on page 94.) Note that it is not possible 
to deploy a complete set of configuration profiles and a single profile file 
to the same Tadpole Pulsar. Also, once the “profile” has been uploaded, it 
also needs to be downloaded individually by name to another Tadpole 
Pulsar. In addition, the profile can be secured to prevent further uploads 
or downloads, preventing transfer of the profile(s) to another firmware 
server or new profile(s) being deployed on the Tadpole Pulsar. 


Profile Upload/Download Overview 


The Network Profiles menu contains options for uploading and 
downloading already configured profiles from the server. See Figure 36. 


Figure 36. 
Network Profile 


= Network Profiles > 
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When a system starts up it attempts to contact a firmware server (which 
may be configured either directly or in the menu system, provided via 
DHCP properties from a server or provided from an entry in the parms file 
from a server). The system checks to see whether there is a more recent 
version of the firmware available and attempts to locate a configuration 
file via TFTP from the firmware server, first from 
<model>.<macaddr>.cfg and then if that fails from <model>.cfg. 


The file downloaded can either contain a full configuration set for the 
Tadpole Pulsar or an individual profile. The configuration in the 
downloaded file is merged with the current configuration. Any changes in 
the downloaded file override those in the running firmware. If the new 
configuration results in any changes to the active profile, the Tadpole 
Pulsar automatically re-starts. 


Upload a Single Profile to the Server 


If the profile has been secured for upload with a password, the following 
steps are required to allow the profile to be uploaded to the firmware 
server. To upload a single profile to the server, complete the following 
steps: 


1. First create the configuration file name on your firmware server and 
ensure that it has correct permissions. For example, 


# cd /tftpboot 
# touch Campusi.cfg 
# chmod 666 Campusi.cfg 


2. Select the Network Profiles menu. Page down to the second page 
and select Upload to Server and press enter. 
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Figure 37. 
Upload Profile BHEF 


Menu 

DHCP 

oFFice wireless 
home wireless VFM to office 
3. Highlight a profile type from the list to export and press [Enter]. See 
Figure 38. 
Figure 38. Export . 
ProfileExample HEP pies a Min Fao 
Configuration name: 


4. (Optional) To populate the configuration automatically to any new 
system which is subsequently attached and accesses the firmware 
server, rename the Campus1.cfg within the /tftpboot 
directory to Tadpole-dt02.cfg: 


# mv Campusi1.cfg Tadpole-mb02.cfg 
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5. Press [Enter]; a confirmation message window should appear. See 
Figure 39. Select OK. 


Figure 39. Export 
Profile 


Confirmation Export profile - 


e\ NOTE: It is advisable to change the permissions to read only on this file to stop any 
further changes once all the systems have been configured. To ensure no 
further systems are configured with the profile configuration, move or 
rename the file. The Download Profile/Profiles menu allows you to import 
the configuration to each system individually. 


Upload All Profiles to the Server 

This option uploads the entire configuration set to the server. 

To upload the entire profile configuration set to the server, scroll down to 
Upload All to Server from the Network Profiles menu and press [Enter]. 


The system prompts for a filename to save the configuration (defaulting 
to <model>.<macaddr>. cfg) via tftp to the firmware server. 
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Figure 40. Export 
All Profiles 


Export profiles 


ole-mbO2.001ESS4C6561.crg 


The system administrator must create this file name or an alternative file 
name on the firmware server, ensuring that the file name is writable prior 
to attempting to upload it. 


e\ NOTE: To remove the default entry <model>.<macaddr>.cfg press 
[Backspace] to delete one character at a time or press [Ctrl-U] and the entry 
is removed ready for anew <filename>. cfg to be inserted. 


If the Tadpole Pulsar has a system password set, it is necessary to enter 
this password to allow the upload to complete. Should any single profile 
have a password securing the upload, this is also required prior to the 
system password request to allow the upload to complete. 


Renaming the file created on the firmware server to 
Tadpole<model>.cfg allows the profile to be propagated to any 
Tadpole Pulsar of the same model provided the profile is not secured 
against download. 
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Download a Profile 


1. Toimport a configuration to the Tadpole Pulsar. Select Download 
from Server from the Network Profiles menu and press [Enter]. 
See Figure 41. 


Figure 41. 
Download from | DHEF 


Server > 
f 


Secure ProFile T 
Upload to Server 
Uplead All ta Server 


Back ta Main 


2. Erase the default file name and enter the configuration file name 
present on the firmware server. See Figure 42. 


Figure 42. 

Import Profile DHCF 

Configuration Configuration name: 
Name 


3. After entering the configuration name, a “Profile successfully 
imported” message window appears; select OK. 
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Tadpole<model1>. cfg allows the profile to be propagated to any 
new Tadpole Pulsar of the same model which is subsequently attached to 
the network, provided the profile(s) are not secured against download. 


e\ NOTE: Renaming the file created on the firmware server to 


It is possible to target a configuration file to a particular Tadpole Pulsar by 
either explicitly creating Tadpole<model>.<macaddr>.cfg or by 
creating a Tadpole<model>.<macaddr>.parms file in whicha 
series of single profiles required for this device are listed, provided the 

. parms file is not secured against download. (See "Tadpole Pulsar .parms 
File" on page 94 for details of use.) The Tadpole Pulsar restarts if 
necessary. 


If the profile has a security password set to protect unauthorized 
download, it is necessary to enter the password in order to download the 
profile. The profile must be downloaded using the Download From 
Server from the Network Profiles menu as detailed above. The user is 
prompted to enter the security password of any profile which has been 
assigned a security password before the profile(s) are imported to the 
Tadpole Pulsar. 


e\ NOTE: It is not possible to download both a complete set of profiles and single 
profiles to a single Tadpole Pulsar. 


An individual profile either replaces the profile with the same name or 
adds it into the first blank profile slot. If it does not match, or if no slots are 
free, it is ignored. 


Network Access Setup 


This section describes how to set up the Tadpole Pulsar to access the 
network via Ethernet, wireless, and broadband. 


Configuring and Connecting Using Ethernet 
Default Ethernet Configuration DHCP 
The Tadpole Pulsar default configuration profile is to connect via DHCP to 
a Sun Ray server, provided the Ethernet cable is connected. Depending 


on your Sun Ray server configuration, no further configuration is 
necessary. 
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It is possible to reconfigure the first profile (DHCP) or to create your own 
profile for any given network configuration. The name of the current 
active profile is displayed in the top left hand corner of the OSD. 


Figure 43. 
Connected to 


DHCP Network Hetworking 


Ethernet: Configuring and Connecting a Static IP 


1. After selecting the Networking option from the Main Menu, select 
Ethernet from the Select Interface screen and press [Enter]. 


Figure 44. 
Networking 


M : 
ie Hetworking 


2. Select None from the Ethernet Setup menu. 
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Figure 45. 
Ethernet Setup 
Menu 


Ethernet Setup 


3. Under Setup TCP/IP, select Static. 


Figure 46. Setup 
TCP/IP Screen 


Setup TCP-IP 


4. Enter prompted information into the table: 


Static IP Parameters Comments 
Enter IP Address 


Enter Netmask 


Enter Router (default router IP address) 


Enter Broadcast 


Enter MTU (optional, press enter for default) 
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5. After entering the appropriate TCP/IP information for your location, 
select Yes or No as appropriate in the Save Changes screen. If you 
selected Yes, you are given a confirmation screen stating, “Changes 
saved.” Return to the Networking menu by selecting No Save 
Changes screen and OK at the Changes Saved screen. 


Exit to the Main Menu via Back to Main or by pressing [Esc]. 


7. If your Sun Ray server configuration does not require you to enter a 
server or firmware server address, nor a Domain Name Service for 
the operation, re-initialize the Tadpole Pulsar for the changes you 
have made to take effect. Press [Menu-A] (or [Stop-A] on a Sun 
keyboard) to reset and reboot the firmware. 


8. Once negotiation between the client and server is complete, you are 
connected to the server. You are now be presented with either a 
login screen, a request to insert your smart card, or some other 
server-dependent startup screen. 


Ethernet 802.1X 


The Tadpole Pulsar supports the following 802.1X extensible 
authentication protocols (EAP): 


* —PEAP/MSCHAPv2 
« —PEAP/GTC 
- TLS 


802.1X requires an authentication server, such as a radius server, along 
with an Ethernet switch able to be configured to provide certification to 
enable access. Configure the radius server and download any certificates 
required to comply with the appropriate protocols. Should the 
authentication method use certificates, ensure that the certificates have 
been downloaded prior to configuring Ethernet 802.1X (see "Certificate 
Management" on page 65). 


NOTE: MTU (Maximum Transmission Unit). The default setting is 1500 bytes, 
which is the maximum value. If you are using a VPN other than that 
included on the Tadpole Pulsar, you might want to decrease this value to 
allow space for IPSec headers. (1366 bytes, for example). 
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Configuring a Server 


1. After selecting the Servers option at the main menu, you are 
prompted for your server IP address or name. You can enter up to 10 
server addresses. 


Figure 47. Setup 
Servers Screen Wired static 


(1 of 2) [| 
i 


Enter Serwer 1: 


2. Next you are prompted for a firmware server address. Enter the 
address if required, or else press [Enter] and leave it blank. 


Figure 48. Setup 
Servers Screen Wired static 


(2 of 2) | 
=] 


Enter Firmware Server: 


3. Atthe Save Changes menu, highlight Yes and press [Enter]. Press 
[Enter] at the prompt and OK to confirm configuration saved. 
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4. For the changes you have made to take effect, you must re-initialize 
the Tadpole Pulsar. Press [Menu-A] (or [Stop-A] on a Sun keyboard) 
to reset/reboot the firmware. 


5. Once negotiation between the client and server is complete, you are 
connected to the server. You may now be presented with either a 
login screen, a request to enter your smart card, or some other 
server-dependent startup screen. 


Configuring a Domain Name Service 


1. Select the Networking option at the main menu. Then select 
Domain Name Service. 


Figure 49. 
Networking Wired static 


Menu Goo) 


Bandwidth Cantroal 
Ethernet 
Wireless 

Back ta Main 


2. Enter your DNS Server domain name. 


Figure 50. DNS 
Servers Screen Wired static 


(1 of 2) [S| 
= 


Enter Domain Hame 
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3. Next you are prompted for the IP address of the DNS server. 


Figure 51. DNS 
Servers Screen 


(2 of 2) DHS Servers = 
——| 


4. Atthe Save Changes menu, highlight Yes and press [Enter]. Press 
[Enter] again at the prompt and OK to confirm changes saved. 


5. For the changes you have made to take effect, you must re-initialize 
the Tadpole Pulsar. Press [Menu-A] (or [Stop-A] on a Sun keyboard) 
to reset/reboot the firmware. 


6. Once negotiation between the client and server is complete, you are 
connected to the server. You may now be presented with either a 
login screen, a request to enter your smart card, or some other 
server-dependent startup screen. 


Configuring and Connecting Using Wireless 
The Tadpole Pulsar has a built-in wireless card to connect to an 802.11x 
wireless access point or wireless router that is configured for your Sun Ray 
network. 


At the OSD, select Networking and then select Wireless from the 
Networking menu. 
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Figure 52. 
Networking 
Menu 


Hetworking 


The system can now either scan for local wireless networks or you can 
configure the wireless manually. 


Manual Wireless Configuration 


Continue with these steps to configure the wireless manually: 


1. Select Configure Manually and press [Enter]. 


Figure 53. 
Wireless Setup 


S : 
acini Wireless Setup 


2. Atthe Enter SSID (network name) prompt, enter the SSID of your 
wireless network and press [Enter]. 


3. At the next screen displaying the wireless security mode option, 
select the appropriate network configuration. The Tadpole Pulsar 
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supports the following WLAN security modes: WEP, WEP/802.1X, 
WPA-PSK, WPA-PSK2, WPA-EAP, and WAP2-EAP. 


Figure 54. WLAN 
Security Modes 


Wireless Setup 


Select the security mode appropriate to your router and config- 
ure accordingly. 


e\ NOTE: If you use Certificates for authentication, these should be first added. 


4. Next, select the appropriate option to configure the wireless for a 
DHCP or for a Static IP address. 


Figure 55. IP 
Configuration 


Screen Setup TCP-IP 
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5. Enter prompted information into the table: 


Static IP Parameters Comments 


Enter IP Address 


Enter Netmask 


Enter Router (default router IP address) 


Enter Broadcast 


Enter MTU (optional, press enter for default) 


6. After entering the appropriate TCP/IP information for your location, 
select Yes or No as appropriate in the Save Changes screen. If you 
selected Yes, you are given a confirmation screen stating, “Changes 
saved.” Return to the Networking menu by selecting No Save 
Changes screen and OK at the Changes Saved screen. 


Exit to the Main Menu via Back to Main or by pressing [Esc]. 


8. If your Sun Ray server configuration does not require you to enter a 
server or firmware server address, nor a Domain Name Service for 
the operation, re-initialize the Tadpole Pulsar for the changes you 
have made to take effect. Press [Menu-A] (or [Stop-A] on a Sun 
keyboard) to reset and reboot the firmware. 


9. Once negotiation between the client and server is complete, you are 
connected to the server. You may now be presented with either a 
login screen, a request to insert your smart card, or some other 
server-dependent startup screen. 


e\ NOTE: The quality and reliability of the wireless router/access point plays a major 
role in the wireless performance of the Tadpole Pulsar. Older off-the-shelf 
wireless routers tend to perform less reliably when running graphics- 
intensive programs via wireless. If you have questions regarding wireless 
routers, consult your Tadpole Pulsar representative. 
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To allow further configuration of a wireless device, select Advanced from 
the main menu, then select Wireless Tunables. See Table 4 below. 


Table 4. Wireless Tunables 


Wireless 
Tunable 


Description 


Specifications 


Fragmentation 
Threshold 


Used to adjust the size above 
which packets sent over the 
wireless network are broken up. 
Reducing the threshold can 
improve performance on noisy 
networks but in general degrades 
performance by increasing 
overhead. 


Range: 256-2346 
Default: 2346 


RTS/CTS 
Threshold 


Used to adjust the RTS/CTS 
threshold. This is the minimum 
packet size for which the wireless 
driver performs an RTS/CTS 
handshake prior to packet 
transmission (minimum). This 
increases overhead upon 
transmission but can improve 
performance on networks with a 
large number of active nodes. 


Range: 0-2346 
Default: 2346 


Default 
Transmit Key 


Used to select the default transmit 
key slot for WEP encryption. May 
be necessary for some wireless 
routers. 


N/A 


e\ NOTE: Alteration of these options is generally not required for correct operation. 
They may be used to tune behavior in certain wireless network 
environments. Be aware that incorrectly setting some of these may 
degrade performance for particular configurations. 


Scan for Networks 


As an alternative to configuring the wireless manually, you can scan for 


networks. 
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1. Select Scan for networks and press [Enter]. You are presented with 
a list of available networks. 


Figure 56. 
WirelessSetup oOFFice wireless 


Screen | ( ' 1 


Wireless ane aie 


CoanFigure manually 
CoanFigure during connect 
Disable Wireless 


Similarly, the Configure during connect option allows for the 
locally available wireless access points to be scanned during the 
profile initialization phase. The user selects from the list the wire- 
less device for connection, then enters the WLAN security mode 
and supplies the appropriate authentication for the selected 
mode. 


Figure 57. 
Configureduring) GFFice Wireless 


Connect [ty] 


Wireless Configuration: 
Scan For networks 
ConFigure manuall 


Disable Wireless 


Using this option, the user can configure the wireless device for 
operation when the profile is secured by a system password, 
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which denies access to the majority of the menu system (see "Sys- 
tem Password" on page 93 for further details). 


2. Select the desired network and press [Enter]. 


Figure 58. List of 
Networks oFFice wireless 


[tr] 


Select WiFi Hetwork: 


GO-HETGEAR-G (31) 
AHOYG (Fre) 
CiscoA (F 1) 
MeteorE (66) at 


3. Select the WLAN security mode required and press [Enter]. 


Figure 59. 
WirelessSetup oFFice Wireless 
Security Modes [t 1] 


WLAH oes Made: 


4. Enter the appropriate authentication for the selected mode. 
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wu 


Figure 60. IP 
Configuration 
Screen 


OV 
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Next, select the appropriate option to configure the wireless for a 
DHCP or for a Static IP address. 


Setup TCP-IP 


If you select Static IP addresses for your Tadpole Pulsar, you are 
prompted for the following information: 


Static IP Parameters Comments 


Enter IP Address 


Enter Netmask 


Enter Router (default router IP address) 


Enter Broadcast 


Enter MTU (optional, press enter for default) 


After entering the appropriate TCP/IP information for your location, 
select Yes or No as appropriate in the Save Changes screen. If you 
selected Yes, you are given a confirmation screen stating, “Changes 
saved.” Return to the Networking menu by selecting No Save 
Changes screen and OK at the Changes Saved screen. 


Exit to the Main Menu via Back to Main or by pressing [Esc]. 


If your Sun Ray server configuration does not require you to enter a 
server or firmware server address, nor a Domain Name Service for 
the operation, re-initialize the Tadpole Pulsar for the changes you 
have made to take effect. Press [Menu-A] (or [Stop-A] on a Sun 
keyboard) to reset and reboot the firmware. 
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10. Once negotiation between the client and server is complete, you are 
connected to the server. You may now be presented with either a 
login screen, a request to insert your smart card, or some other 
server-dependent startup screen. 

e\ NOTE: The quality and reliability of the wireless router/access point plays a major 
role in the wireless performance of the Tadpole Pulsar. Older off-the-shelf 
wireless routers tend to perform less reliably when running graphics- 
intensive programs via wireless. If you have questions regarding wireless 
routers, consult your Tadpole Pulsar representative. 


Disable Wireless 


Select Disable Wireless and press [Enter] to disable the wireless device 
within the firmware. 


Figure 61. 
Disable Wireless 


Wireless Setup 


Certificate Management 
The Tadpole Pulsar currently supports the use of Certificate Authority 


Root certificates in order to verify the authenticity of a radius server used 
during WPA Enterprise and 802.1X (EAP) authentication. 
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A number of certificates files in PEM format can be stored on the local 
flash of the Tadpole Pulsar. To transfer a certificate file to the Tadpole 
Pulsar, it must be placed on a web (HTTP or HTTPS) server and then 
downloaded to the Tadpole Pulsar using the Security -> Certificate 
Management -> Add CA Root Certificate option. This prompts first for 
the URL to load the certificate PEM file from and then the filename to 
store it locally to. 


Certificates can also be removed from the local store by use of the 
Remove CA root certificate option in the Certificate menu. 


Once a certificate is loaded on to the Tadpole Pulsar it can be selected for 
verification of a radius server in the wireless and Ethernet 802.1X 
configuration menus. If no CA root certificate is selected when 
configuring the wireless or 802.1X devices, then the authenticity of the 
server is not verified. 


Connecting and Configuring Using Mobile Broadband 


E\ 
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NOTE: Refer to Table 14, “Supported 3G Devices,” on page 107 for a list of 
compatible broadband devices. 


1. Power off the unit and insert the mobile broadband device. The 
mobile broadband device must be inserted in the Tadpole Pulsar for 
the mobile broadband menu to be displayed and to enable the 
device to be configured. 


2. Turnon the Tadpole Pulsar. 


Press [Menu-M] (or [Stop-M] on a Sun keyboard) to access the 
main-menu. 
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4. Select Networking and press [Enter]. Then select Mobile Broadband 
and press [Enter] Select Yes and press [Enter]. 


Figure 62. 
Networking 
Menu 


Hetworking 


5. Select your region and press [Enter]. 


Figure 63. Select 
Locality Menu 


Select Locality 
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6. Enter your network provider's APN ID if required, or leave blank and 
press [Enter]. 


Figure 64. 
Mobile 2G JPH to of Fice 
Broadband 
Setup Screen 
(1 of 2) 
Enter APH Id 
| 
7. If required, configure to enable the mobile broadband card to 

prompt for a user name and password when connecting to your 

network. 
Figure 65. 
Mobile 2G JPH ta of Fice 
Broadband 
Setup Screen 
(2 of 2) 


Prampt during cannect For 
User-Password? 


Yes Ho 
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8. Enter MTU value if appropriate or press [Enter]. 


Figure 66. Enter 
User Name 


Mobile Eroadboand Setup 


9. Press [Enter] to save changes and then press [Enter] again at the OK 
prompt to confirm configuration saved. Then press [Esc] or select 
Back to Main to return to the main menu. 


Summary of Network Access Procedures 


Accessing, navigating, and configuring via the Tadpole Pulsar menu 
system is straightforward. The Tadpole Pulsar menu system contains a 
variety of variable parameters to enable configuration for a wide range of 
network configurations and customer driven requirements. 


Below is an overview of the steps and menu options required to configure 
the following network options. 


Example 1: Ethernet Connection to DHCP Server 
No configuration required, attach the Ethernet cable. 


Example 2: Wireless Connection to Office Network 


1. Create a profile/edit profile. 


2. Configure wireless device. 


Tadpole Pulsar User Guide Page 69 


3. Configure Servers/Domain Name Service. 
4. Activate profile. 
Example 3: Wireless Connection over VPN to Office Network 


Create a profile/edit profile. 

Configure wireless device. 

Configure Servers/Domain Name Service. 
Configure VPN. 


SP oe Ow NOS 


Activate profile. 


Example 4: Mobile Broadband Connection over VPN to Office Network 


Create a profile/edit profile. 

Configure 3G device. 

Configure Servers/Domain Name Service. 
Configure VPN. 


Wo YON > 


Activate profile. 
Example 5: Wireless Connection Using the Mini Browser over VPN to 
Office Network 


1. Create a profile/edit profile. 
2. Configure wireless device. 
3. Configure Servers/Domain Name Service. 
4. Configure VPN. 
5. Enable and initialize the mini browser. 
6. Activate profile. 
Example 6: Select from the Available Wireless Access Devices 


1. Create a profile name (no further configuration necessary). 
2. Activate profile. 


Provided an Ethernet cable is not attached and the wireless switch is set 
to the ON position, the Tadpole Pulsar provides a list of the available 
wireless access points available for selection. 
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Configuring VPN on the Tadpole Pulsar 


The Tadpole Pulsar VPN client can be configured with devices supporting 
the following IPSEC RFCs. 


el NOTE: The Tadpole Pulsar VPN client does not support SSL VPNs. 


Summary of Supported Features 


The following is a list of supported features for the Tadpole Pulsar VPN 
client: 


+ — Standards compliant RFCs for encryption and authentication (RFC 
2406), key generation and maintenance (RFCs 2407, 2408, 2409, 
and 4109), dead peer detection (RFC 3706), and connection 
behind NAT devices (RFCs 3947 and 3948). 


+ Internet Protocol Encapsulating Security Payload (IP ESP) 
encryption and authentication algorithms ensure confidentiality 
and integrity of data. Refer to the following IP ESP algorithms: 


Encryption: 3DES, AES 128, AES 192, and AES 256 
Authentication: MD5, SHA-1 and SHA-2 

el NOTE: Null Encryption can be negotiated alongside one of the authentication 
algorithms to enable ESP to operate in a mode similar to IP Authentication 


Header (AH). Encryption and authentication keys are provided as dynamic 
keys negotiated via IKE. 


- Internet Key Exchange (IKE); Identity Protection Mode and 
Aggressive Mode for Phase 1 negotiations, Quick Mode for Phase 
2 negotiations. 


¢ Perfect Forward Security (PFS) is provided by a selected Diffie- 
Hellman group as the source of key material. This ensures that 
data established by Phase 2 keys is not affected if Phase 1 keys are 
compromised. 


¢ Dynamic IP Address Assignment is supported through Mode 
Config. 


+ User identification using standard user name/password 
mechanisms or using RSA SecurID authentication. 
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« Dead Peer Detection (DPD) support allows a VPN peer to send 
messages to the Tadpole Pulsar to detect if a connection is still 
functioning. 


* Connection behind a Network Address Translation (NAT) 
device is automatically detected by the VPN client, and is 
supported with NAT-Traversal (NAT-T). 


Preparing for Configuration of VPN 


Before commencing with any configuration, some preparatory work is 
required. The following may be needed: 


+ Tadpole Pulsar typically uses DHCP to obtain an IP address and to 
get IP addresses off the Sun Ray Auth and Firmware servers. In 
VPN configurations, the Sun Ray server information is not likely to 
be available via DHCP. The server addresses can be configured in 
the Servers menu. 


- — Is the Tadpole Pulsar likely to be behind a NAT? This is not directly 
configured but some of the configuration options are affected by 
this. Specifically, the use of Main Mode and Identification via IP 
Address are not supported with a NAT router. Aggressive Mode 
must be configured when behind a NAT. 


+ Determine which method of identification is to be used--Key 
Identifier or Email Address-- and gather the relevant ID values. 
(For example, when connecting to a Cisco VPN concentrator, the 
Key Identifier is the group to which you wish to connect.) 


« Determine the pre-shared secret relevant to the identifier 
previously chosen. Currently, pre-shared secret is the only 
method of authentication that is supported. 


- Is the user to be separately verified using XAuth? 


e\ NOTE: XAuth is an extension of Mode Config and is used to further authenticate 
the user if it is required by the VPN peer. 


- — Is Aggressive mode to be used during Phase 1? If so, the 
encryption algorithm, authentication algorithm and PFS (Perfect 
Forward Security) Group needs to be determined. 
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Configuring the VPN 
1. From the main menu, select Security and press [Enter]. 


Figure 67. Main 
Menu 


Main Menu pl 


2. Select IPSec and press [Enter]. 


Figure 68. 
Security Menu 


Security Menu el 
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3. Select Enable IPSec and press [Enter]. Press [Enter] 
again and then OK. 


Figure 69. IPSec 
Screen (1 of 2) home wireless VPH to a 
=o E 


= 


Configure IPSec 
Back to Security 


4. Select Configure IPSec and press [Enter]. 


Figure 70. IPSec 
Screen (2 of 2) home wireless VPH to of Fice 
— 


Disable IPSec 


Back to Security 
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5. Select the Phase 1 mode: Easy VPN, Aggressive, or Main. Phase 1 
negotiation determines how the traffic is protected for 
negotiation of the ESP Security Associations. 


Figure 71. Select 
Phase 1 Mode home wireless VPH to of Fic: 


Aggressive 
Main 


For configuring the VPN in Easy Mode, go to Step 6.; for Aggres- 
sive Mode, go to Step7; for Main Mode, go to Step 8. 


6. Easy VPNis a simplified set of the parameters required by 
Aggressive Mode. For Easy VPN you are only asked for the following: 


a. Enter the Group Name and press [Enter]. Then enter the identi- 
fier used to select the pre-shared key in the VPN gateway. 


Figure 72. Enter 
Group Name home Wireless JPA to office 


Enter Group Hame [1 - 63 
chars: 
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b. Select User Authorization mode and press [Enter]. 


Figure 73. User 
Authorization 
Screen 


c. Should you select Xauth or SecurID, enter the pre-shared key and 
press [Enter]. 


Figure 74. IPSec 
Configuration home wireless YPH to Soph 
cone # 


Screen = 


Enter Preshared Key (2 - 64 
chars-hex digits): 


The Tadpole Pulsar currently only supports pre-shared keys as 
the method for authentication. The pre-shared key entered 
here must match that on the VPN gateway. The key can be 
ASCII characters or, by prefixing with Ox, hex digits. This is the 
seed to the creation of the dynamic keys. If this does match the 
gateway, then the Tadpole Pulsar fails to connect to the VPN. 


d. Enter the VPN client fixed IP address, or leave blank and press 
[Enter]. 
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If the Tadpole Pulsar has been assigned a fixed IP address within 
the VPN then enter it here. Leave the address empty to force the 
Tadpole Pulsar to use Mode Config and request an IP address from 


the VPN gateway. 


Figure 75. Enter 
VPN Client IP home wireless VPH to of Fi 


Address 


Enter VPM Client IP Address: 


e. Enter the VPN Server IP address and press [Enter]. This is the pub- 
lic address of the VPN gateway. 


Figure 76. Enter 
VPN Server IP home wireless WPM to office 
Address rm 


Enter VFH Server IP 
Address: 


Go to Step 9. 
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7. In Aggressive Mode, knowledge is required of the configuration of 
the VPN gateway, specifically, which algorithms the gateway is 
configured to accept. The Tadpole Pulsar sends a single proposal 
with the given algorithms. Aggressive Mode requires more 
configuration effort but provides more control. 


a. Select the Device ID Type. 


Figure 77. Select 
Device ID Type 


Select Device Id inl 
Type 


Select one of the five options to determine how the Tadpole 
Pulsar identifies itself to the VPN gateway. The identification is 
typically used as an identifier to select the pre-shared key in the 
VPN gateway. The most commonly used identifiers are IP 
Address and Key Identifier. If the Tadpole Pulsar is behind a 
NAT device, NAT precludes the use of IP Address as an identi- 
fier. You need to use another option and configure your VPN 
gateway accordingly. 
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b. For Key Identifier, enter the Device ID and press [Enter]. Enter the 
identifier used to select the pre-share key in the VPN gateway. 


Figure 78. Enter 
Device ID home wireless VPH to of Fic 


Enter Dewice Id (1-63 
chars: 


c. Select the encryption algorithm to match your VPN concentrator. 


Figure 79. Select 


Encryption home wireless VPH to of Fic: 
Algorithm 


SDES-CBC 


AES-192 
AES-256 
HULL 
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d. Select the authentication algorithm to match your VPN concentra- 


tor. 


Figure 80. Select 
Authentication 


home wireless VPM to office 
Algorithm ot 


e. Select the DH group appropriate to your VPN gateway configura- 
tion and press [Enter]. 


The list comprises the Diffie-Hellman groups supported during 
Phase 1 of the IKE negotiation. 


Figure 81. Select 
DH Group 


Group 5 oe ia 


Group 14 (MOOP 2048) 
Group 15 (MOOP 3072) 
Group 16 (MODP 4096) + 


f. Select the PFS group appropriate for your configuration. 


The list comprises the Diffie-Hellman groups available to use to 
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provide Perfect Forward Secrecy between Phase 1 and Phase 2 key 
generation in IKE. 


Figure 82. Select 
PFS Group 


Group 2 ane foes 


Group S(MOOP 1536) 
Group 14 (MOOP 2048) 
Group 1S (MOOP 3072) + 


g. Select the User Authorization mode and press [Enter]. 


Figure 83. Select 
User home wireless VPH to of Fi 


Authorization rage 4s a ; 


Hone 


SecurIf 
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Figure 84. Enter 
Pre-Shared Key 


Figure 85. Enter 
VPN Client IP 
Address 
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h. If you select Xauth or SecurlD, enter the pre-shared key and press 
[Enter]. 


home wireless VPM to office 


Enter Preshored Key (2 - 64 
chars.hex digits): 


The Tadpole Pulsar currently only supports pre-shared keys as 
the method for authentication. The pre-shared key entered 
here must match that on the VPN gateway. The key can be 
ASCII characters or, by prefixing with Ox, hex digits. This is the 
seed to the creation of the dynamic keys. If this does match the 
gateway, then the Tadpole Pulsar fails to connect to the VPN. 


. Enter the VPN client fixed IP address, or leave blank and press 
[Enter]. 


home wireless VPH to of Fi 


Enter VPH Client IP Address: 
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If the Tadpole Pulsar has been assigned a fixed IP address 
within the VPN, then enter it here. Leave the address empty to 
force the Tadpole Pulsar to use Mode Config and request an IP 
address from the VPN gateway. 


j. Enter the VPN Server IP address and press [Enter]. 
This is the public address of the VPN gateway. 
Figure 86. Enter 


VPN Server IP 
Address 


IPSec Configuration ft 


Go to Step 9. 


8. In Main Mode, the Tadpole Pulsar sends a selection of security 
proposals to the VPN gateway. The gateway then selects the most 
appropriate. The set of proposals sent includes most permutations of 
encryption, hash and Diffie-Hellman algorithms supported by the 
Tadpole Pulsar Main and Aggressive modes. Select Main Mode and 
Press [Enter] and select Yes. 
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Figure 87. Select 
Main Mode home Wireless VPM toa ow 
a 


Using Main mode is 
incompatible with HAT. Da 
you really want to use this 
option? 


Yes No 


a. Enter the Pre-shared key and press [Enter]. 


Figure 88. Enter 
Pre-SharedKey home wireless VPM to of Fic: 


Enter Preshared Key (2 - 64 
chars“hex digits): 


The Tadpole Pulsar currently only supports pre-shared keys as 
the method for authentication. The pre-shared key entered 
here must match that on the VPN gateway. The key can be 
ASCII characters or, by prefixing with Ox, hex digits. This is the 
seed to the creation of the dynamic keys. If this does match the 
gateway, then the Tadpole Pulsar fails to connect to the VPN. 


b. Enter the VPN client fixed IP address, or leave blank and press 
[Enter]. 


If the Tadpole Pulsar has been assigned a fixed IP address within 
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the VPN, then enter it here. Leave the address empty to force the 
Tadpole Pulsar to use Mode Config and request an IP address from 
the VPN gateway. 


Figure 89. Enter 
VPN Client IP home wireless VPH to of Fi 
Address : 


Enter VPH Client IP Address: 


c. Enter the VPN Server IP address and press [Enter]. 
This is the public address of the VPN gateway. 


Figure 90. Enter 
VPN Server home wireless VPH to office 
Address i 


Enter VPH Server IP 
Address: 


e\ NOTE: Certain configuration options are inherently incompatible with NAT. 
When the Tadpole Pulsar is behind a NAT device, Main Mode fails to 
negotiate keys. If the Tadpole Pulsar is behind a NAT or there is any 


uncertainty select Aggressive Mode. 


NAT precludes the use of IP Address as an identifier. You need to use 
another option and configure your VPN gateway accordingly. 
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9. Atthe “Save Changes” menu highlight Yes and press [Enter]. Press 
[Enter] to confirm configuration saved. 


10. Select Back to Security and press [Enter]; then choose Back to 
Main and press [Enter] to exit the security menu and return to the 
main menu. 


Security Network Login 


This feature is provided should your network connection require a 
permanent SSL authorization to the network. This is achieved via the 
embedded mini browser opening the URL connection and allowing the 
user to provide the authentication necessary to establish the connection. 


1. To enable, from the Main Menu select Security, then select 
Network Login. See Figure 91. 


Figure 91. 
Security Menu 


Security Menu 


2. Enter Yes at the Network Login screen to enable and enter the 
network URL: 


http://IPaddress 
or 


http://www.mysecurenetwork.com 
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See Figure 92 and Figure 93. 


Figure 92. 
NetworkLogin Home Wireless VPH to office 
(1 of 3) 


Enable Lagin via Browser? 


Yes No 


Figure 93. 
NetworkLogin Kame wireless WPM to of Fice 
(2 of 3) 


Enter url 
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3. Press [Enter] to enable. See Figure 94. 


Figure 94. 
Network Login 


f 
— Hetwork Login > 


The mini browser opens and connects to the URL entered. The user must 
authenticate as the site requires. This could be via a login screen, a 
request to insert a smart card, or some other server-dependant startup 
screen. 


If authentication is required prior to the VPN connection being 
established, once the authorization is complete, continue the connection 
by pressing the [Enter] key with the OSD menu displayed. The browser 
window disappears from view (it is hidden) and the Tadpole Pulsar 
continues to establish the VPN connection. Once the VPN connection and 
authentication processes are complete, the Tadpole Pulsar connects to 
the Sun Ray server. Once connected to the server, the user may now be 
presented with either a login screen, a request to insert a smart card, or 
some other server-dependant startup screen. 


To un-hide/uncover the mini browser, use the key sequence 
[Menu-Ctrl-H] (or [Stop-Ctrl-H] on a Sun keyboard). Note that the mini 
browser is only able to connect to the original network host established 
or a server on the same local subnet. If the mini browser exits the 
authorization page, the SSL connection is broken and, depending on your 
network configuration, the connection is likely to fail. 
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User Interface Control 


The Tadpole Pulsar allows you to set the level of user interface control. From 
the Main Menu select Security, then select User Interface Control. 


You can select 3 levels: 


+ Full Access: Default; everything on the UI is available to the user. 


: Profile List: Only the Profiles Tab is available; everything else is 
not shown. 


* Quiet Mode: The Ul and progress indicators do not appear during 
connection. The only time the UI appears (and it will be the "Hide" 
format and not expandable) is if there is an error, e.g. cable pulled 
out, connection timeout. 


Configuring the Mini Browser 


The Tadpole Pulsar has an embedded browser. One function of the 
browser is that it can be used for a web-redirect from a hotel or public 
Wi-Fi access point. 


e\ NOTE: The browser does not support plug-ins (e.g. flash, video, Java). 


Enabling the Mini Browser 


1. To enable the mini browser, go to the OSD Main Menu by pressing 
[Menu-M] (or [Stop-M] on a Sun keyboard). 


2. Using the down arrow key, scroll down to the Advanced Menu and 
press [Enter]. 
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Figure 95. Main 
Menu 


3. Select Mini Browser from the Advanced Menu and press [Enter]. 


Figure 96. 
Advanced Menu 


Advanced Menu 
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4. Select Yes and press [Enter]. 


Figure 97. Mini 
BrowserScreen 3G WFPH to of Fice 


Enable? 


5. Press [Esc] to return to the main menu. 


Now configure the mode of connection for the mini browser: 
Ethernet or wireless. (See earlier sections: on page 52 or on page 57.) 


Configuring a Homepage 


By default the browser's home page is www.tadpole.com. This can be 
configured to a URL of your choice. 


1. From the Main Menu select Advanced, then select Browser 
homepage. 


Figure 98. 
Advanced Menu 3G JPH to of Fice 


Syslag 
Mini Erowser 


Wireless Tunables 
Power Management Le 
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2. Enter the desired URL and press [Enter] to save. 


Figure 99. Mini 

Browser 

Homepage Mini Browser 
hamepage 


ttpe “Wwkmyhoamepage.cam 


Using the Mini Browser 


Once the mini browser has been configured, it can be accessed at any 
time by pressing [Menu-B] (or [Stop-B] on a Sun keyboard). See 
Figure 100. 


e\ NOTE: The browser does not support plug-ins (e.g. flash, video, Java). 


Figure 100. Mini 
Browser es 
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The browser resolves DNS via DHCP. The browser authenticates to the 
web-redirect service if necessary. 


To access the browser menu toolbar press [Esc] and use the arrow keys to 
navigate the menus. To close the browser, select File and Exit. 


To hide the browser from view using a touchpad or mouse, select Hide 
(located in the top left hand corner). To uncover the hidden the browser, 
use the key sequence [Menu-Ctrl-H] (or [Stop-Ctrl-H] on a Sun 
keyboard). 


To close the browser, from the menu, select File and Quit or 
[Menu-Ctrl-B] (or [Stop-Ctrl-B] on a Sun keyboard). 


System Password 


To set a system password, from the main menu [Menu-M] (or [Stop-M] 
ona Sun keyboard) select the Security menu, then select Set Password. 


Figure 101. Set 
Password 


Security Menu uw 


The system password denies access to the majority of the menu system. 
Access to the Main Menu is allowed upon entry of the system password. 
Access is available to the following Menus via use of the Menu shortcuts. 
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Functionality and configuration without provision of the System 
Password can be accessed via the following [Menu] keys (or [Stop] keys 
ona Sun keyboard): 


[Menu-A] Soft reset of the client firmware. The system power cycles and 
restarts. 


[Menu-B] Mini browser (providing it has first been enabled). 
[Menu-L] View license information. 

[Menu-P] List configured profiles and enables selection for use. 
[Menu-N] Network information. 

[Esc] Exits the previous menu. 

Should a system password be forgotten or lost contact your nearest 


Tadpole customer server representative for further instructions on how to 
reset the system password. 


Tadpole Pulsar .parms File 
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The . parms file can be used as an alternative method for specifying 
parameters globally to all Tadpole thin clients which connect to the 
firmware server, or on a per-Tadpole thin client basis. 

During initialization, the Tadpole thin client looks for one of two .parms 
files on the tftp (firmware) server which must conform to the following 
naming convention. 


Tadpole-<Thin Client model name>.MAC.parms 


where MAC is uppercase full 14 hex digit MAC address of the Tadpole thin 
client as identified using [Menu-N] (or [Stop-N] on a Sun keyboard), or 


Tadpole-<Thin Client model name>. parms 
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An example <Thin Client model name> would be dt02 (Pulsar) . 


The Tadpole Pulsar attempts to read the . parms file with the MAC 
address first. Should that fail, it attempts to read the other . parms file. 


The contents of the . parms file is a set of key-value pairs, of the format: 


key=valuei[,value2,....,valuen] 


Recognized keys are: 


servers 
select 
config 
profiles 


fwbase 


Any other keys are ignored, processing of the recognized keys is not 
effected. The keys servers and select are compatible with the same 
options in a SunRay .parms file and have the same meaning. 


Servers Key 


The servers key supports up to 11 Auth Servers (also called Session 
Managers) specified in a list separated by commas. The server names can 
either be names to be resolved by DNS, or IP addresses. It is permissible 
for the DNS name to resolve to multiple IP addresses. 


Select Key 


The select key is used in conjunction with the servers key. It can 
have two values either random or in order. It specifies how the list of Auth 
Servers are processed. A value of inorder tells the Tadpole Pulsar to run 
through the list sequentially until an Auth Server responds. random tells 
the Tadpole Pulsar to select an Auth Servers randomly from the serves list. 
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Config Key 


Takes a single value, identifying the name of a saved configuration to be 
loaded from the firmware server. 


Profiles Key 


Provides a comma separated list of individual profiles saved on the 
firmware server. These are loaded onto the Tadpole Pulsar from the 
firmware server. 


Fwbase Key 


Provides two functions. Provides the URL of the firmware server from 

which the firmware can be downloaded, and, should the URL include the 
firmware version directory path, it also defines the version of the firmware 
which can be downloaded to the Tadpole Pulsar, providing a barrier level. 


fC 
Tadpole Pulsar Firmware Management 


Overview 


The Tadpole Pulsar firmware can be downloaded via a tftp server or, 
provided the current firmware release is V4.0.0 or greater, via an ftp or an 
http server. For detailed instructions regarding a specific firmware version 
refer to the release notes. 


The firmware is provided as a package for installation in the following 
formats *. tar and * . rpm, to enable installation on Sun Ray server 
platform running either Sun Solaris or a Sun Ray server supported Linux 
Operating System. 


The firmware package name comprises the following: 


TAD<tadpole or Tadpole<Thin_Client_model_name>- 
V<version_number> 


The latest publicly available firmware package releases can be 
downloaded from our ftp site ftp://ftp.tadpole.com. 
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Firmware Management 
TFTP 


By default a Sun Ray server uses a tftp boot server as a mechanism to 
update firmware to thin client devices. By installing the package, the 
Tadpole Pulsar firmware is placed inthe /opt/TADmeteor/1lib/ 
firmware/ directory and copied into the /tftpboot directory, and 
depending on the configuration of your Sun Ray Server, allows any 
Tadpole Pulsar of the same model name to download the firmware 
located in /tftpboot. 


Should you wish limit or target a given firmware release onto a specific 
unit this can be achieved by amending the path in which the firmware is 
installed, in conjunction use of a Tadpole Pulsar . parms file using the 
fwhase option to define the path of the firmware applicable to the 
Tadpole Pulsar model type or a specific unit. 


Example: 


All Tadpole Pulsars with the exclusion of the Tadpole Pulsar unit with MAC 
address 001B384C6598 should use firmware V4.0.0. 


Create a default parms file, Tadpole -dt02.parms located in the 
/tftpboot directory with the following entry: 


fwbhase=tftp://192.168.128.1/Tadpole-dt02-4.0.0 


create a second parms file Tadpole -dt02.001B384C6598. parms 
with the entry: 


fwbhase=tftp://192.168.128.1/invaliddirectoryname 


No new firmware is installed on the unit with MAC address 
001B384C6598. For further options please refer to the release notes 
provided with the specific firmware release. 
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HTTP or FTP 


The tftp protocol has very poor performance over slow or high latency 
connections. The firmware download speed can be improved 
dramatically by using an alternative protocol such as http. To install using 
an http or ftp server a Tadpole Pulsar . parms file must be defined. The 
http or ftp server address must be valid, i.e. configured for use. 


Below is an example showing the use of an http apache web server for 
firmware download: 


Create a web server on machine 192.168.128.2 that responds to port 8080 
and is accessible to the thin client devices with a directory called firmware 
directly under the web pages root (htdocs) directory. The URL for the 
firmware downloads will then be: 


http://192.168.128.2:8080/firmware 


Create a default . parms file, Tadpole -dt02.parms located in the 
/tftpboot directory on the Sun Ray firmware server with the following 
entry: 


fwbhase=http://192.168.128.2:8080/firmware 


Copy the files from the default location on the firmware server in /opt/ 
TADmeteor/1ib/firmware/Tadpole-dt02-<Firmware 
Version> to the htdocs/firmware directory on the web server. 


Ensure that the web server is enabled. You can use the thin client mini 
browser to check this. [Menu-B] (or [Stop-B] on a Sun keyboard) will 
launch the mini browser. Enter the URL: 


http://192.168.128.2:8080/firmware 


and you should see the files you just copied. 


If you now do [Menu-A] (or [Stop-A] on a Sun keyboard) to reset the 
client, it should load any new firmware using http. 
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Lock Configuration 


The Lock Configuration option is under Main Menu > Advanced > 
Configuration Updated. This option allows the Tadpole Pulsar to be 
locked against server updates. The unit does not download new firmware 
of a new profile image. 


This takes precedence of any profile locking method adopted, along with 
any method employed to control the version of the firmware on the unit 


Reset Configuration 


The Reset Configuration option is the last item on the Main Menu. This 
option removes the profile configurations. It does not remove the video, 
keyboard or touchpad settings. Also, it does not change the behavior of 
the power button or lid switch should these have been configured. 


Optional Features 


The Optional Features menu can be selected from the Main Menu. 


Reserved for future enhancements. Features are enabled or disabled by 
insertion of a Tadpole provided key. 


Notes 
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Appendix and Licenses 


This section contains Sun OSD codes, Tadpole OSD codes, and the 3G 
compatibility chart. This section also provides software license 
information. 
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Sun OSD Codes 


Sun OSD icon messages and codes are summarized in the following 
tables. 


Table 5. Icon Messages 


1 The Sun Ray unit is starting up and is waiting for Ethernet link. 


11 The server is authenticated by the Sun Ray and the graphic/ 
keyboard network connection is encrypted. 


12 The Sun Ray cannot authenticate the server but the graphic/ 
keyboard network connection is still being encrypted. 


13 The server is authenticated to the Sun Ray; the network 
connection between the Sun Ray and the server are not 
encrypted. 


14 The server is not authenticated to the Sun Ray; the graphic/ 
keyboard network connection is not encrypted. 


15 The Sun Ray is refusing to talk to the server due to the server's 
refusal or inability to authenticate or encrypt the network 
connection. 


16 The Sun Ray USB bus is temporarily busy servicing a high-speed 
device, and the keyboard or mouse may not be responsive to user 
input. 


21 The Sun Ray unit is booting up and is waiting on DHCP IP address 
and parameter assignment. 


22 The Sun Ray unit is booting up and is now waiting for the initial 
connection to a Sun Ray server. 


23 The connection between the Sun Ray and the network is down. 
Check the network drop cable and (if the network drop cable is 
okay) the network switch. 


24 The Sun Ray has disconnected from the previous server. 
25 The Sun Ray is being redirected to a new server. 
26 The Sun Ray has connected to the server and is waiting for 


graphics traffic (this is the GNC state). 
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Table 5. Icon Messages (Continued) 


27 The Sun Ray is broadcasting to locate a Sun Ray server since either 
it was not provided with Sun Ray specific DHCP parameters or all 
of the specified servers are not responding. 


NOTE: Icon numbers 31 through 34 are the network status display brought up 
by the user pressing all three audio keys. 


31 The network link is up, the server is authenticated, and graphics/ 
keyboard network connections are not encrypted. 

32 The network link is up, the server is not authenticated, and 
graphics/keyboard network connections are encrypted. 

33 The network link is up, the server is authenticated and graphics/ 
keyboard are encrypted. 

34 The network link is up, the server is not authenticated and 
graphics/keyboard are not encrypted. 

50 The server is refusing to talk to the Sun Ray due to the Sun Ray's 
refusal or inability to authenticate or encrypt the network 
connection 


Table 6. DCHP State Codes 
DCHP State Meaning 


State Code 
A The server is refusing to talk to the Sun Ray due to the Sun Ray's 
refusal or inability to authenticate or encrypt the network 
connection. 
B DCHP provided IP address, subnet mask, and router, but Sun Ray 


vendor-specific parameters are missing. 


C DHCP provided IP address and Sun Ray vendor-specific 
parameters, but subnet mask and router are missing. 


D DHCP provided all expected parameters. 
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Tadpole OSD Codes 


Table 7. Firmware Upgrade OSD Codes 
Code Meaning 


Start firmware update. 


Check firmware barrier level. 


Fetch firmware component. 
Fetch/Verify failed. 
Write to flash failed. 


Installing new firmware. 


Backup firmware after verification. 


oO] Ol NI AD] MW] BR] WwW! nN 


No firmware update available. 


= 
(o) 


Insufficient power for firmware update. 


Table 8. Network Type OSD Codes 
Code Meaning 
E Ethernet 
M Mobile broadband 
Ww Wireless 
Table 9. VPN OSD Codes 
Code Meaning 
40 VPN has been initialized. 
41 Internet Key Exchange (IKE) phase 1 is complete. 
42 xauth user ID is authenticated. 
43 xauth user ID is not authenticated. 
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Table 9. VPN OSD Codes (Continued) 


44 mode config is complete. Tadpole Pulsar received dynamic IP 
and DNS information from concentrator. 

45 IKE phase 2 is complete (i.e. VPN is up). 

46 IKE Phase 1 is complete. Negotiated temporary keys to protect 
main key exchange. 

47 IKE Timeout. No response during key exchange. 

48 Dead Peer Detection (DPD) Timeout. Can no longer 
communicate with the other endpoint. 

49 No proposals from concentrator. Mismatched cryptographic 


algorithms during VPN negotiation. 


Table 10. Mobile Broadband OSD Codes 


Code Meaning 

50 3G Data card found and being initialized. 

51 Checking SIM/PIN status. Ensure the 3G card has a valid SIM and 
that it's not locked (UMTS only). 

52 Configure the 3G card for the correct network type (3G 
preferred, UMTS only). 

53 Registering with cell provider data network. 

54 Setting 3G network Access Point Name (APN). (UMTS only). 

55 Configuring TCP/IP network with IP address. 


Table 11. Wireless OSD Codes 


Code Meaning 
60 No encryption on wireless. 
61 Starting Wired Equivalence Protocol (WEP) security on wireless 
connection. 
62 Using WEP with 802.1X key management. 
63 Using Wi-Fi Protected Access (WPA)/Pre Shared Key (PSK). 
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Table 11. Wireless OSD Codes (Continued) 


64 Using WPA/EAP. 

65 WPA process terminated. 

66 Disconnect wireless connection. 
67 Wireless connected. 

68 Wireless scanning for networks. 
69 Wireless disabled with RF-Kill. 


Table 12. EAP (for Wireless or Wired 802.1X) OSD Codes 


Code Meaning 
70 EAP (802.1X) authentication starting. 
71 EAP (802.1X) type select phase. 
72 EAP succeeded. 
73 EAP failed. 


Table 13. Ethernet 802.1X OSD Codes 


Code Meaning 


80 Start Ethernet with 802.1X authentication. 
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3G Compatibility Chart 


Table 14. Supported 3G Devices 


Vendor and Model 


Merlin V640 
Merlin V740 
Merlin V620 
UM 760 v 
UM175 v 
USB760 v 
GT Ultra Express 

GlobeTrotter Express HSUPA 


Verizon 


GlobeTrotter Express 7.2 
HSDPA 

iCON 225 v 
iCON HSUPA v 
Merlin EX720 

Curitel Pantech PX 500-Sprint 


AT&T Cingular 


Sprint 
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Table 14. Supported 3G Devices (Continued) 


Provider Vendor and Model 


Mobile Connect 3G/ GPRS 
Mobile Connect 3G Broadband 
Huawei E870 

Huawei E172 v 
K3760 v 
GlobeTrotter Express HSUPA 


GlobeTrotter Express 7.2 
HSDPA 

GlobeTrotter GT MAX 7.2 
iCON 225 v 
iCON HSUPA v 
K3760 v 
Merlin XU870D 
GlobeTrotter Express HSUPA 


Vodafone 


GlobeTrotter Express 7.2 
HSDPA 

GlobeTrotter GT MAX 7.2 
iCON 225 v 
K3760 v 
T-Mobile Merlin EX870 


Orange 
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End User License Agreement 


This device contains third party proprietary software ("Software"). In no 
event will an end user/consumer: (a) copy, distribute, modify, 
disassemble, reverse engineer or create derivations of the source code of 
the Software, or any portion thereof; (b) export the Software or any 
portion thereof in contravention of applicable export laws and 
regulations; (c) violate applicable laws and regulations; and/or (d) makes 
representations or warranties on behalf of the third party software 
provider. 


Software Licenses 


Some components of the Tadpole Pulsar contain code licensed under the 
Linux Real Mode Interface (LMRI dated 1998) and GNU General Public 
License (GPL_Version 2, dated June 1991). 


The software included in this product contains copyrighted software that 
is licensed under the GPL. A copy of that license is included in this 
document on page 110. You may obtain the complete Corresponding 
Source code from us for a period of three years after our last shipment of 
this product, which is be no earlier than 2011-08-01, by sending a money 
order or check for $10 to: 


GPL Compliance Department 

General Dynamics Itronix Corporation 
20450 Stevens Creek Blvd., Suite 300 
Cupertino, CA 95014, USA 


Please write “source for Tadpole Pulsar” in the memo line of your 
payment. 


This offer is valid to anyone in receipt of this information. 
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Linux Real Mode Interface License 


Copyright (C) 1998 by Josh Vanderhoof 


A library of DPMI-like functions for Linux 


Permission is hereby granted, free of charge, to any person obtaining a 

copy of this software and associated documentation files (the “Software’), to 
deal in the Software without restriction, including without limitation the 
rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 
copies of the Software, and to permit persons to whom the Software is 
furnished to do so, subject to the following conditions: 


THE SOFTWARE IS PROVIDED “AS IS’, WITHOUT WARRANTY OF ANY KIND, 

EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. 
IN NO EVENT SHALL JOSH VANDERHOOF BE LIABLE FOR ANY CLAIM, DAMAGES 

OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR 

OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE 

OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. 


GNU GENERAL PUBLIC LICENSE 
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Version 2, June 1991 

Copyright (C) 1989, 1991 Free Software Foundation, Inc., 
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA 
Preamble 


The licenses for most software are designed to take away your freedom to 
share and change it. By contrast, the GNU General Public License is 
intended to guarantee your freedom to share and change free software-- 
to make sure the software is free for all its users. This General Public 
License applies to most of the Free Software Foundation's software and to 
any other program whose authors commit to using it. (some other Free 
Software Foundation's software is covered by the GNU Lesser General 
Public License instead.) You can apply it to your programs, too. When we 
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speak of free software, we are referring to freedom, not price. Our General 
Public Licenses are designed to make sure that you have the freedom to 
distribute copies of free software (and charge for this service if you wish), 
that you receive source code or can get it if you want it, that you can 
change the software of use pieces of it in now free programs; and that you 
know you can do these things. 


To protect your rights, we need to make restrictions that forbid anyone to 
deny you these rights or to ask you to surrender the rights. These 
restrictions translate to certain responsibilities for you if you distribute 
copies of the software, or if you modify it. For example, if you distribute 
copies of such a program, whether gratis or for a fee, you must give the 
recipients all the rights that you have. You must make sure that they, too, 
receive or can get the source code. And you must show them these terms 
so they know their rights. We protect your rights with two steps: (1) 
copyright the software, and (2) offer you this license which gives you the 
legal permission to copy, distribute and/or modify the software. Also, for 
each author's protection and ours, we want to make certain that everyone 
understands that there is no warranty for this free software. If the 
software is modified by someone else and passed on, we want its 
recipients to know that what they have is not the original, so that any 
problems introduced by others will not reflect on the original authors’ 
reputations. Finally, any free program in threatened constantly by 
software patents. We wish to avoid the danger that redistributes of a free 
program will individually obtain patent licenses, in effect making the 
program proprietary. To prevent this, we have made it clear that any 
patent must be licensed for everyone's free use or not licensed at all. 


The precise terms and conditions for copying, distribution and 
modification follow. 
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GNU GENERAL PUBLIC LICENSE - TERMS AND CONDITIONS 
FOR COPYING, DISTRIBUTION AND MODIFICATION 
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0. This License applies to any program or other work which contains a 
notice placed by the copyright holder saying it may be distributed under 
the terms of this General Public License. The “Program’, below, refers to 
any such program or work, and a “work based on the Program” means 
wither the Program or any derivative work under copyright law: that is to 
say, a work containing the Program or a portion of it, either verbatim or 
with modifications and/or translated into another language. (Hereinafter, 
translation is included without limitation in the term “modification”.) Each 
licensee is addressed as “you”. Activities other than copying, distribution 
and modification are not covered by this License; they are outside its 
scope. The act of running the Program is not restricted, and the output 
from the Program is covered only if its contents constitute a work based 
on the Program (independent of having been made by running the 
Program). Whether that is true depends on what the program does. 


1. You may copy and distribute verbatim copies of the Program's source 
code as you receive it, in any medium, provided that you conspicuously 
and appropriately publish on each copy an appropriate copyright notice 
and disclaimer of warranty; keep intact all the notices that refer to this 
License and to the absence of any warranty; and give any other recipients 
of the Program a copy of this License along with the program. 


You may charge a fee for the physical act of transferring a copy, and you 
may at your options offer warranty protection in exchange for a fee. 


2. You may modify your copy or copies of the Program or any portion of it, 
thus forming a work based on the Program, and copy and distribute such 
modifications or work under the terms of Section 1 above, provided that 
you also meet all of these conditions: 


A) You must cause the modified files to carry prominent notices 
stating that you changed the files and the date of any change. 


B) You must cause any work that you distribute or publish, that in 
whole or in part contains or is derived from the Program or any part 
thereof, to be licensed as a whole at no charge to all third-parties 
under the terms of this License. 
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C) If the modified program normally reads commands interactively 
when run, you must cause it, when started running for such 
interactive use in the most ordinary way, to print or display an 
announcement including an appropriate copyright notice and a 
notice that there is no warranty (or else, saying that you provide a 
warranty) and that users may redistribute the program under these 
conditions, and telling the user now to view a copy of this License. 
(Exception: if the program itself is interactive but does not normally 
print such an announcement, your work based on the Program is not 
required to print an announcement.) 


These requirements apply to the modified work as a whole. If identifiable 
sections of that work are not derived from the Program, and can be 
reasonably considered independent and separate works in themselves, 
then this License, and its terms, do not apply to those sections when you 
distribute them as separate works. But when you distribute the same 
sections as part of a whole which is a work based on the Program, the 
distribution of the whole must be on the terms of this License, whose 
permissions for other licensees extend to the entire whole, and thus to 
each and every part regardless of who wrote it. Thus, it is not the intent of 
this section to claim rights or contest your rights to work written entirely 
by you; rather, the intent is to exercise the right to control the distribution 
of derivative or collective works based on the Program. 


In addition, mere aggregation of another work not based on the Program 
with the Program (or with a work based on the Program) on a volume of a 
storage or distribution medium does not bring the other work under the 
scope of this License. 


3. You may copy and distribute the Program (or a work based on it, under 
Section 2) in object code or executable form under the terms of Sections 
1 and 2 above provided that you also do one of the following: 


A) Accompany it with the complete corresponding machine-readable 
source code, which must be distributed under the terms of Sections 1 
and 2 above on a medium customarily used for software interchange; 
or, 


B) Accompany it with a written offer, valid for at least three years, to 
give any third party, for a charge no more than your cost of physically 
performing the source distribution, a complete machine-readable 
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copy of the corresponding source code, to be distributed under the 
terms of Sections 1 and 2 above on a medium customarily used for 
software interchange; or, 


C) Accompany it with the information you received as to the offer to 
distribute corresponding source code. (This alternative is allowed 
only for noncommercial distribution and only if you received the 
program in object code or executable form with such an offer, in 
accord with Subsection b above.) 


The source code for a work means the preferred form of the work for 
making modifications to it. For an executable work, complete source code 
means all the source code for all modules it contains, plus any associated 
interface definition files, plus the scripts used to control compilation and 
installation of the executable. However, as a special exception, the source 
code distributed need not include anything that is normally distributed 
(in either source or binary form) with the major components (compiler, 
kernel, and so on) of the operating system on which the executable runs, 
unless that component itself accompanies the executable. 


If distribution of executable or object code is made by offering access to 
copy from a designated place, then offering equivalent access to copy the 
source code from the same place counts as distribution of the source 
code, even though third parties are not compelled to copy the source 
along with the object code. 


4. You may not copy, modify, sublicense, or distribute the Program except 
as expressively provided under this License. Any attempt otherwise to 
copy, modify, sublicense or distribute the Program is void, and will 
automatically terminate your rights under this License. However, parties 
who have received copies, or rights, from you under this License will not 
have their licenses terminated so long as such parties remain in full 
compliance. 


5. You are not required to accept this License, since you have not signed it. 
However, nothing else grants you permission to modify or distribute the 
Program or its derivative works. These actions are prohibited by law if you 
do not accept this License. Therefore, by modifying or distributing the 
Program (or any work based on the Program), you indicate your 
acceptance of this License to do so, and all its terms and conditions for 
copying, distributing or modifying the Program or works based on it. 
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6. Each time you redistribute the Program (or any work based on the 
Program), the recipient automatically receives a license from the original 
licensor to copy, distribute or modify the Program subject to these terms 
and conditions. You may not impose any further restrictions on the 
recipients’ exercise of the rights granted herein. You are not responsible 
for enforcing compliance by third parties to this License. 


7. lf, as a consequence of a court judgment or allegation of patent 
infringement or for any other resonant limited to patent issues), 
conditions are imposed on you (whether by court order, agreement or 
otherwise) that contradict the conditions of this License, they do not 
excuse you from the conditions of this License. If you cannot distribute so 
as to satisfy simultaneously your obligations under this License and any 
other pertinent obligations, then as a consequence you may not 
distribute the Program at all. For example, if a patent license would not 
permit royalty-free redistribution of the Program by all those who receive 
copies directly or indirectly through you, then the only way you could 
satisfy both it and this License would be to refrain entirely from 
distribution of the Program. 


If any portion of this section is held invalid or unenforceable under any 
particular circumstance, the balance of the section is intended to apply 
and the section as a whole is intended to apply in other circumstances. 


It is not the purpose of this section to induce you to infringe any patents 
or other property right claims or to contest validity of any such claims; 
this section had the sole purpose of protecting the integrity of the free 
software distribution system, which is implemented by public license 
practices. Many people have made generous contributions to the wide 
range of software distributed through that system in reliance on 
consistent application of that system; it is up to the author/donor to 
decide if he or she is willing to distribute software through any other 
system and a licensee cannot impose that choice. 


This section is intended to make thoroughly clear what is believed to be a 
consequence of the rest of this License. 
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8. If the distribution and/or use of the Program is restricted in certain 
countries either by patents or by copyrighted interfaces, the original 
copyright holder who places the Program under this License may add an 
explicit geographical distribution limitation excluding those countries, so 
that distribution is permitted only in or among countries not thus 
excluded. In such case, this License incorporates the limitation as if 
written in the body of this License. 


9. The Free Software Foundation may publish revised and/or new versions 
of the General Public License from time to time. Such new versions will be 
similar in spirit to the present version, but may differ in detail to address 
new problems or concerns. 


Each version is given a distinguishing version number. If the Program 
specifies a version number on this License which applies to it and “any 
later version’, you have the option of following the terms and conditions 
either of that version or of any later version published by the Free 
Software Foundation. If the Program does not specify a version number of 
this License, you may choose any version ever published by the Free 
Software Foundation. 


10. If you wish to incorporate parts of the Program into other free 
programs whose distribution conditions are different, write to the author 
to ask for permission. For software which is copyrighted by the Free 
Software Foundation, write to the Free Software Foundation; we 
sometimes make exceptions for this. Our decision will be guided by the 
two goals of preserving the free status of all derivatives of our free 
software and of promoting the sharing and reuse of software generally. 


NO WARRANTY 


11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO 
WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY 
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE 
COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM 
“AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR 
IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 
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MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE 
ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM 
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME 
THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 


12. INNO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO 
IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO 
MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED 
ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, 
SPECIAL, INCIDENTAL OR DAMAGES ARISING OUT OF THE USE OR 
INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS 
OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED 
BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE 
WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY 
HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 


TIFF Library License 


Copyright (c) 1988-1997 Sam Leffler 
Copyright (c) 1991-1997 Silicon Graphics, Inc. 


Permission to use, copy, modify, distribute, and sell this software and its documentation 
for any purpose is hereby granted without fee, provided that (i) the above copyright 
notices and this permission notice appear in all copies of the software and related 
documentation, and (ii) the names of Sam Leffler and Silicon Graphics may not be used in 
any advertising or publicity relating to the software without the specific, prior written 
permission of Sam Leffler and Silicon Graphics. 


THE SOFTWARE IS PROVIDED “AS IS” AND WITHOUT WARRANTY OF ANY KIND, EXPRESS, 
IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY WARRANTY OF 
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. 


IN NO EVENT SHALL SAM LEFFLER OR SILICON GRAPHICS BE LIABLE FOR ANY SPECIAL, 
INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES 
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER OR NOT 
ADVISED OF THE POSSIBILITY OF DAMAGE,AND ON ANY THEORY OF LIABILITY, ARISING 
OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 
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